<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="186">
<package pkgid="ce3c76a6fadb2651c4e336fb110d05f3a6a9ae3a2c062ae0ad33a835d624e0ef" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="bc5061decee23a859b7165eea5213f6a4928ebef67860d17eab0f45c9a8837f3" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="673b14d091e3d650dd8aec032fc0b4b5ef4841fa454177279893f655a9ceace6" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="9fa2885897d29063e086351f173ee3c8348e481ec456d130749c089227080411" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="028ab30e3c5edaba9974d95019c5400d58233c4252064e9700ad5769d72679e5" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="36b494b49be102065110d4e91d81d10cc5bf26e457393e069ea29bb4958aab9b" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="4dda7c08db394e5ccf537c4ecc5376afc03ae166ad97bfe521d3f8c3fa431483" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="1be71cbc4c62566dc69af206b04923b37ef71d241263899fc0be2466b8ea66e5" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="d92dfab7b244e32963cb361e8be89e50df2cba6041ba43e6cf3ee4ff0b44d60e" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="af4eaf33ed4b29bcfbd6e0795168a84b4079ec22d0dc4b23a6f6070c300b16e4" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="eddaf2609976c92403a0460a538622aff81fff215f2835b1a3bca1682f700daa" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="a721f8c0154fb786413040c984464916dd829f9525fdd3f9b0fa130c08db61b2" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="a433a50d32346e20aa11794a740c15ee0309c469364b3918577303d4e57058a2" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="b9f725326540a16d7f81376abd4d048a8df47bbdafc54bb72c1dc27d076f4c80" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="3b44c575466f8a8d85f8369bd449af706141c28442231f6af39e9a63be03425b" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="eb31c5ee10d8ee7da8bca138bce872ae4c5048e4f1da593f3f8be2e887fb4601" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="2ab36a417e60324528863254b24efdef1bb73f001096f150788977b0d3fa2052" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="cb200fe8a779dc8fedfa329717a7adac91d31a0c0faeed2e1c411a46480e6a40" name="festival" arch="src">
  <version epoch="0" ver="2.5.0" rel="lp152.3.3.1"/>
  <changelog author="mskibbe@suse.de" date="1188561600">- Bug 294691 - VUL-0: Festival: Privilege elevation</changelog>
  <changelog author="hvogel@suse.de" date="1190289600">- get rid of usermod %pre call
- add group/useradd to prereq</changelog>
  <changelog author="mskibbe@suse.de" date="1200916800">- fix build problems with new gcc</changelog>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="bad25c72461de9569563e5f06caf2a022a48e6b4d6a2321feabea73b6d41b01d" name="festival" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp152.3.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="29619be802ab3cd9657beb7b2e7ea8d0eccd98c54197b8c698bfb8d63d2703c1" name="festival-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp152.3.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="269717b4e7a0ac42da40f9d88089255fb1a7d90f1a5ab758747b6bf1f0b3a330" name="git" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="6e46fdfab0b573c099e94b6c37e129551c65142b2d554efb2c1315e209344e2c" name="git" arch="src">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="f9c2eb5913b5292af2bad66a83102b18e6b3b43813e1ff7e673c90bb989af08d" name="git" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="eed210ac6cf4d7d35b6aef813822dc1b5274b8b9fbccbb23ec8257055a623288" name="git-arch" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="98706f6ebcebd2d11a0de357b6071946c4b6e68a5b3bf4eaa7975c2f2d4d2bc5" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="ab4b6b380f8b6e9e9c80b034d3f8fc1b718ec4a2ea087636a2430b7e193376d2" name="git-core" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="01fc1af2d7416ffc15d3b6b2944754323fa04aff0dc09da353209aef0bbd12f2" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="38505829aef279962f524ad4b7f874a043d42233b4a00dec97c0bcceca649466" name="git-credential-gnome-keyring" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="6d33fdf5ba23a3af6b96d4b6a8c7dc2a1791bb71437b7404675ccd93abbf8524" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="64284238a8c5aa7c5b250aa5fd31b43b11f07a924a91e11ef37adba231914aed" name="git-credential-libsecret" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="014c5df264d7eb85c78b007df15cb394afe6ba5542cdfded0d1d4ca8e0ad3a79" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="764824e2cb5940c0028403f7edfa8a08dd6ce3415c9320e124bc4852b579a86c" name="git-cvs" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="93e8f438a8deddfd9836d166fe1fe8aded0318fa10acbbe6671e914898c0b72e" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="0a1f8148f1ba0853266c9a40dc05828ce8c6a7be80dfd527876e6d2c633d345d" name="git-daemon" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="2daa84da44acbb9c29880c873df9f5761630dc314dd4cc0a361a1fdcaf331e3e" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="bc293394e1f31d7043edab121e36425c455aef5b07994f94188320494b1c53f7" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="fcbf9a4ddda5c061690ef205e958e2dcb616ecaa92340dd968d3ab541d8b0004" name="git-email" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="b6253d47f82e3534c5d6eda7051e73bcab46fb31014f8a725a3f877960b650a1" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="7266d4ba171c0495c4781ecf310457ef0762cc517bc54aefe3a599dc330e3838" name="git-gui" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="e4aebf0b35443694b3fb77a4f588a5a8db50ba5ad2776bb1867e05999a19eef8" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="83674329f36d3a08fb55a32d44799f68f09301945e5e588c7b62111b2d317560" name="git-p4" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="48a2bbaefb582a1714b328c81ac43afb5a823ed0fca90a3c2623fa1bdad6d39a" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="54d00f09cc5a58e9369b5f70ea41aa9034f0c9b2d657893d8c1d7c9a21d7f634" name="git-svn" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="c38413038490a7f47a1027bb66c7399a00180744fdc087829c2004b383f56628" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="63e8757dc90ce75dee0aaf86d5242e7480c9995d58b152a6a7edb5aa965b5039" name="git-web" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="b85a93f893653b7b23c306ed3c2f43238fa9880824890c1ca139dd97466d9f1c" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="93df3cd9b9a3c0048471653b2c91e9d242470c178ff368c050378871e83c22d6" name="gitk" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="9c39b296205c9eee98ff531e27b15ffb0b04eda8d30e70875957db69b65271c1" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="ecf6599f474be1dcaeaf22ba07614815ace3b75dba05bdb81bc518f8c3a4f909" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="15.0.12" rel="lp152.3.3.1"/>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1573905600">- Update to version 15.0.12:
  * Drop ppc64-nopie.patch
  * golang.sh: integrate ppc64-nopie.patch -buildmode=pie only on ppc64
  * golang.sh: avoid excessive "rpm --eval..." calls
  * Install Bazel files in src directory
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency
  * Remove s build flag no longer supported in go 1.10 boo#776058
  * Packaging: improve _service tar_scm declarations add _servicedata</changelog>
</package>
<package pkgid="786e169e8b3ec7cfc0518810d7c8dee72050611d6d53a2b83cf950224eb3f324" name="golang-packaging" arch="src">
  <version epoch="0" ver="15.0.12" rel="lp152.3.3.1"/>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1573905600">- Update to version 15.0.12:
  * Drop ppc64-nopie.patch
  * golang.sh: integrate ppc64-nopie.patch -buildmode=pie only on ppc64
  * golang.sh: avoid excessive "rpm --eval..." calls
  * Install Bazel files in src directory
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency
  * Remove s build flag no longer supported in go 1.10 boo#776058
  * Packaging: improve _service tar_scm declarations add _servicedata</changelog>
</package>
<package pkgid="a1bfebdb0ae8887b7012a5d63543b5dc4e9b72e8f066d4af3a7979610e9d7df5" name="grafana" arch="src">
  <version epoch="0" ver="7.0.3" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1571227200">- Update to 6.4.3
  * Bug Fixes
  - Alerting: All notification channels should send even if one fails to send. #19807, @jan25
  - AzureMonitor: Fix slate interference with dropdowns. #19799, @aocenas
  - ContextMenu: make ContextMenu positioning aware of the viewport width. #19699, @krvajal
  - DataLinks: Fix context menu not showing in singlestat-ish visualisations. #19809, @dprokop
  - DataLinks: Fix url field not releasing focus. #19804, @aocenas
  - Datasource: Fixes clicking outside of some query editors required 2 clicks. #19822, @aocenas
  - Panels: Fixes default tab for visualizations without Queries Tab. #19803, @hugohaggmark
  - Singlestat: Fixed issue with mapping null to text. #19689, @torkelo
  - @grafana/toolkit: Don't fail plugin creation when git user.name config is not set. #19821, @dprokop
  - @grafana/toolkit: TSLint line number off by 1. #19782, @fredwangwang</changelog>
  <changelog author="witold.bedyk@suse.com" date="1575374400">- Revert the spec file and make script
- Remove PhantomJS dependency</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409600">- add obs-service-go_modules to download required modules into vendor.tar.gz
- adjusted spec file to use vendor.tar.gz
- adjusted Makefile to work with new filenames
- BuildRequire go1.14
- Update to version 6.4.4:
  * DataLinks: Fix blur issues. #19883, @aocenas
  * Docker: Makes it possible to parse timezones in the docker image. #20081, @xlson
  * LDAP: All LDAP servers should be tried even if one of them returns a connection error. #20077, @jongyllen
  * LDAP: No longer shows incorrectly matching groups based on role in debug page. #20018, @xlson
  * Singlestat: Fix no data / null value mapping . #19951, @ryantxu</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409601">- Update to version 6.4.5:
  * Create version 6.4.5
  * CloudWatch: Fix high CPU load (#20579)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409602">- Update to version 6.5.0
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409603">- Update to version 6.5.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409604">- Update to version 6.5.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409605">- Update to version 6.5.3:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409606">- Update to version 6.6.0:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496000">- Update to version 6.6.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496001">- Update to version 6.6.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
</package>
<package pkgid="a45fadbdcd15f28652edb98e4fa5dad899fb0dfa3e754bef95e0f6c352d92c1c" name="grafana" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1571227200">- Update to 6.4.3
  * Bug Fixes
  - Alerting: All notification channels should send even if one fails to send. #19807, @jan25
  - AzureMonitor: Fix slate interference with dropdowns. #19799, @aocenas
  - ContextMenu: make ContextMenu positioning aware of the viewport width. #19699, @krvajal
  - DataLinks: Fix context menu not showing in singlestat-ish visualisations. #19809, @dprokop
  - DataLinks: Fix url field not releasing focus. #19804, @aocenas
  - Datasource: Fixes clicking outside of some query editors required 2 clicks. #19822, @aocenas
  - Panels: Fixes default tab for visualizations without Queries Tab. #19803, @hugohaggmark
  - Singlestat: Fixed issue with mapping null to text. #19689, @torkelo
  - @grafana/toolkit: Don't fail plugin creation when git user.name config is not set. #19821, @dprokop
  - @grafana/toolkit: TSLint line number off by 1. #19782, @fredwangwang</changelog>
  <changelog author="witold.bedyk@suse.com" date="1575374400">- Revert the spec file and make script
- Remove PhantomJS dependency</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409600">- add obs-service-go_modules to download required modules into vendor.tar.gz
- adjusted spec file to use vendor.tar.gz
- adjusted Makefile to work with new filenames
- BuildRequire go1.14
- Update to version 6.4.4:
  * DataLinks: Fix blur issues. #19883, @aocenas
  * Docker: Makes it possible to parse timezones in the docker image. #20081, @xlson
  * LDAP: All LDAP servers should be tried even if one of them returns a connection error. #20077, @jongyllen
  * LDAP: No longer shows incorrectly matching groups based on role in debug page. #20018, @xlson
  * Singlestat: Fix no data / null value mapping . #19951, @ryantxu</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409601">- Update to version 6.4.5:
  * Create version 6.4.5
  * CloudWatch: Fix high CPU load (#20579)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409602">- Update to version 6.5.0
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409603">- Update to version 6.5.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409604">- Update to version 6.5.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409605">- Update to version 6.5.3:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409606">- Update to version 6.6.0:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496000">- Update to version 6.6.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496001">- Update to version 6.6.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
</package>
<package pkgid="d5880709ed783c70bbee567c68ddf113bfd197ce673673a1251bcf833cea5354" name="grafana-piechart-panel" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="lp152.2.3.1"/>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- inital package</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575547200">- Fix for dark/light mode text font colors
- Conversion to typescript
- Grafana 6.3 compatibility
- Update SUSE name in spec file
- Adapt spec file to typescript conversion</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1576065600">- Add missing tsconfig.json to file list</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint</changelog>
  <changelog author="Sumit Jamgade &lt;sjamgade@suse.com&gt;" date="1584705600">- Update to v1.4.0
- Use files from the dist folders
  this is precomiled version to javscript from upstream
- Include README in the dist folder to show up on grafana UI</changelog>
</package>
<package pkgid="492f05f733da38f226c78db660023c82b2db68257c4e8d8f3a73cc5984938f01" name="grafana-piechart-panel" arch="src">
  <version epoch="0" ver="1.4.0" rel="lp152.2.3.1"/>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- inital package</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575547200">- Fix for dark/light mode text font colors
- Conversion to typescript
- Grafana 6.3 compatibility
- Update SUSE name in spec file
- Adapt spec file to typescript conversion</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1576065600">- Add missing tsconfig.json to file list</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint</changelog>
  <changelog author="Sumit Jamgade &lt;sjamgade@suse.com&gt;" date="1584705600">- Update to v1.4.0
- Use files from the dist folders
  this is precomiled version to javscript from upstream
- Include README in the dist folder to show up on grafana UI</changelog>
</package>
<package pkgid="0258431762c4bea47fca176178d36e55d69edeb1d56d8ba912d62b102315ec1d" name="grafana-status-panel" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- inital package</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
</package>
<package pkgid="baa3f580b4fc72bf79456be564cc50fd8e543e55be7dc6a031e82f372355c2fe" name="grafana-status-panel" arch="src">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- inital package</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
</package>
<package pkgid="515d85fe90b9e6fd6d5defb4a4ad2044795a79565ad2329f26528709a3df486c" name="graphviz" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="b01d398da2fbeb8c527a330a696a318272ab8bf139efd8e7703dc67407dd3de0" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="7d0f069eb5f4b700e67965fa20c7f673f83a023cbe99a28d3d4d251d3b86a722" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="d06b413531c577f6d61833f943b5bac3c98ec421554c16aed0acf73eb73940b0" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="6f5f4d60630d1fbbcf7590a4655ad66a7da77e7a94b79ed28e0b779c93e85dea" name="graphviz-devel" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="7fd93f2eeb228b8cf442bc34e68e511b477b8c9369091e12b125291938b54664" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="44f887576240ffdd6d43229d06af51e7ba5e3021b9b3149bc53619361a25480a" name="graphviz-doc" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f04cd905b198026e29aab64b7e3c3f2f93ac04521d6f2c38b8ea44708f506c7a" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3cb7362ed7dc19fac3aef4d90d319b1f6118c840df66d1fef67e20c45e0691cb" name="graphviz-gd" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="86cd29c70ed7a9f11f318b3f070c37b45f18bbc922181c14783c8c135b70914e" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="e07f1c65f5391820f47aa29534cd94e88f9f02ccf01773e493f509fe47d15eb0" name="graphviz-gnome" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ec445e9ca5999fca59707725903714d9719fab7ed1a165238e891424268a7bd9" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="aa2e6ee9c62f7c95eba3209773beed88e46fc53589cc4c2172c6b56b496ba689" name="graphviz-guile" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="876424e04a463e04f58898dd4d2be1bda6b8b595d0eca0669ff61a5c1c57af4a" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="1ebfe867c5f196f2cf02e2e191b6ad79b28d726cbbaf3b4649bf481f26a285c0" name="graphviz-gvedit" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="2348d654412a5acb8e352fc1b36dafd11550b7427b74d64d7d417e98c374c798" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ba1426fdcb43afa065c52e5978380c3812ad8c200854d8d323d9b9356aa96b20" name="graphviz-java" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9fe8b36217515eefa63bc90ce4a4fec2ca9cf2dae8b55d3860b4fb6c0a1b1ce8" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="35d7078e10545c3ecd7cdc4f4d809ff98b9e1cc554f174ce25f66ceb084821fc" name="graphviz-lua" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="71bfff46f1301755cb03be122295f7c4e14734abc9d0cc6c61114905030a185e" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="6ea9b80b228345229b39e7494f58f8cb2661c7929c21de1a7dc051e905c1dc09" name="graphviz-perl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="88d1ac6419b0df1439c2ddf78fe4261f9d232837c983816ff02dfdeca96c61b1" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5cd3c8f7b6fcdf668235e422c0fc2c6f753f984c2085e31af6b1408f6cdafaaa" name="graphviz-php" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ca2d2e12389ae1720efd1de405432941071707f2548083695c2891f908d83763" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="83621a9aa838f48d8dc435d6ef4c3f02e91aad02c27d643a3ff262a2371e0109" name="graphviz-plugins-core" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="5c604bd958bd199a220ba940e8a9b7b8b69bc7b0432905708e482ab9eceabe21" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="b0bfad23a4419a4ce432da1bf231d3e222f48da34c03721939959a4a4f0feb9d" name="graphviz-python" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f98ea3fa9d8900e27aac8247572f6c01965096dd208fa745985efa6d6067efbd" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="04ef41008d63f717867f2fc5592f43f5e319cea67c286e0ac23478552e3b7421" name="graphviz-ruby" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="54b73c52f714ad6dd26fce12b63e515527c609a0842d665500b6bf40ee858d34" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="13c8761a978c0fe90f2e8325c7a42a7a737844bcf7ab490e15734704ff9aaa65" name="graphviz-smyrna" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="c79c2ffc0ae57acdbe588a12b0feffe88cba4560d1e45e01cd574668166f5e5d" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="86aa14feee876fa03ef812e6ffe7e4dd3c4d418962de184bd32a03053e24f729" name="graphviz-tcl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="25ed6c147b197ab099e63af0e663ea01af991544b7056ed72972b370554ffcfb" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="98665a86add64c2c642264367181070acab3c0909a0c58de4255d3d4c95b4bc3" name="growpart" arch="noarch">
  <version epoch="0" ver="0.31" rel="lp152.8.3.1"/>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Marcus Schaefer &lt;ms@suse.com&gt;" date="1571313600">- Deleted rootgrow source and sub-package build
  rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow
  and builds a standalone package now</changelog>
  <changelog author="Marcus Schaefer &lt;ms@suse.com&gt;" date="1571918400">- Reference entry for maintenance
  Tracker bug for the submission set to: bsc#1154357</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1572004800">- Replaced hardcoded systemd paths with macros in spec file</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1572350400">- Clean growpart.spec:
  * Drop obsolete tags
  * Use install instead of mkdir+cp+chmod
  * Fix build on SLE 12 SP4</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1582804800">- Update to version 0.31 (bsc#1164736)
  + mount-image-callback: mount with -o 'rw' or -o 'ro' (LP: #1663722)
  + mount-image-callback: run blockdev and udevadm settle on nbd devices.
    (LP: #1741096, 1741300)
  + mount-image-callback: Drop support for mounting lxd containers.
    (LP: #1715994)
  + growpart: fix bug that stopped GPT disks from being grown past 2TB.
    (LP: #1762748)
  + mount-image-callback: mention --help and -C/--cd-mountpoint in Usage
  + growpart: fix bug when resizing a middle partition with sgdisk
    (LP: #1706751) [Fred De Backer]
  + growpart: Resolve symbolic links before operating.
    [Kevin Locke] (LP: #1744406)
  + growpart: fix bug occurring if start sector and size were the same.
    [Lars Kellogg-Stedman] (LP: #1807171)
  + debian/control: drop Suggests on lxc1
  + debian/tests/control: add test growpart-start-matches-size.
  + White space cleanup.  Remove trailing space and tabs.
  + Move to git.</changelog>
</package>
<package pkgid="80c1c87b51c92991eb9beef938c974418dafd02119d1e7c481eabe0b4dc69f2f" name="growpart" arch="src">
  <version epoch="0" ver="0.31" rel="lp152.8.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Marcus Schaefer &lt;ms@suse.com&gt;" date="1571313600">- Deleted rootgrow source and sub-package build
  rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow
  and builds a standalone package now</changelog>
  <changelog author="Marcus Schaefer &lt;ms@suse.com&gt;" date="1571918400">- Reference entry for maintenance
  Tracker bug for the submission set to: bsc#1154357</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1572004800">- Replaced hardcoded systemd paths with macros in spec file</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1572350400">- Clean growpart.spec:
  * Drop obsolete tags
  * Use install instead of mkdir+cp+chmod
  * Fix build on SLE 12 SP4</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1582804800">- Update to version 0.31 (bsc#1164736)
  + mount-image-callback: mount with -o 'rw' or -o 'ro' (LP: #1663722)
  + mount-image-callback: run blockdev and udevadm settle on nbd devices.
    (LP: #1741096, 1741300)
  + mount-image-callback: Drop support for mounting lxd containers.
    (LP: #1715994)
  + growpart: fix bug that stopped GPT disks from being grown past 2TB.
    (LP: #1762748)
  + mount-image-callback: mention --help and -C/--cd-mountpoint in Usage
  + growpart: fix bug when resizing a middle partition with sgdisk
    (LP: #1706751) [Fred De Backer]
  + growpart: Resolve symbolic links before operating.
    [Kevin Locke] (LP: #1744406)
  + growpart: fix bug occurring if start sector and size were the same.
    [Lars Kellogg-Stedman] (LP: #1807171)
  + debian/control: drop Suggests on lxc1
  + debian/tests/control: add test growpart-start-matches-size.
  + White space cleanup.  Remove trailing space and tabs.
  + Move to git.</changelog>
</package>
<package pkgid="60b74db4a68870d6982d0096070f56985aa6dbc639ed02ee2b592c8987c4023f" name="jq" arch="i586">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="d6a87ba475c163d7f88b4b04beecb2fb44dbf0ea63b214cef455c0ff76911241" name="jq" arch="src">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="robert.munteanu@gmail.com" date="1380628800">- Initial packaging of version 1.3</changelog>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="dee2e2a81e2b9dd497ed81ffde10384e5a329a3c0d357059cfd5042b6bade41a" name="jq" arch="x86_64">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="e3e3f4ffd047210a6876257f45e95e865e4a5241d8c22b4164bd90ac6df16a84" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="d0848334edfae5c79c0d3441924035ba5d48ad1dbc3f94dae01ca329eb60ab04" name="libbluetooth3" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="d1d5c18bbe1adaca681e1ca5267c234108cb4691cf047450505432edc1dfe6a7" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="b0fcc46eba4c95aa33540f3bff65df5f8dbfc3b6197f884304477d6ad167e45d" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="f1fa95a2cdbb17e5890e395ee8602260de79304efb43732b415c690d60b23b9e" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="16215e8ca434436dbca2c96d0bf0f5039bf5d7b2758df62510580a3bef1a0f09" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="44f34a0544bcfb5a7bba26ff059430684ec25da882203bad769cbdcc79b9ec2b" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="c53e363b2132266ec57e778bbef5dfc8381dd13697457e93c7287729e8fd813a" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="ee2f15868284eed8ab0dc3287a1f5c0c9603e6bea6f8daa693f35c76106a054c" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="3df716fd1820fcc33816f9b8497ce8314fd8ab6d1993e856dacd9aa82562975f" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="fed086924482dfa5391e16cd65c532559205adb5fe0d75c088c227710be97854" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="ec78818540d93d6fe2415049e6ba1a729b9797bd1a12e09291e5c277b0b95df2" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="7e57cbd06be415909172c279133fb5d1e6ed898e1e11402741696293e2777466" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="29de703eacf67cf6a2d73782133858f91809c74700a7fb62ace203e2bfe1d79a" name="libgraphviz6" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="90d7eb62ee8a30c93e8c5748bf01e889676e6dedc6f332c0f4ad90d625ae510a" name="libgraphviz6" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="24e52c6751bada8207f1ea09ee01896125c640b309c3a2473ff3dec3322980c7" name="libjq-devel" arch="i586">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="d10434349e08c856589de24be8973403e9e42003be57cc6645c78a312141e46e" name="libjq-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="bc7dafecce9f8210cd89b39cfb226cf810566f0e6e0eb3c5eca2fc373327d88f" name="libjq1" arch="i586">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="0cf7c0db6bbcfb41986302192a1bea23675354a6a87e7cef029f1811d2503953" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="9c5375dc526a69a7f09abb3a03117a594d07a0cf803976f3e4f88219e2615b57" name="mercurial" arch="i586">
  <version epoch="0" ver="4.5.2" rel="lp152.7.3.1"/>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557835200">- Fix incorrect patch-checking with symlinks and subrepos
  (CVE-2019-3902, bsc#1133035):
  hg-CVE-2019-3902-fix1.patch
  hg-CVE-2019-3902-fix2.patch
  hg-CVE-2019-3902-fix3.patch</changelog>
</package>
<package pkgid="812a7ff87a9a20c84d2e07c60936d86ae6d65fd16d2e5b3161699cf47279ff51" name="mercurial" arch="src">
  <version epoch="0" ver="4.5.2" rel="lp152.7.3.1"/>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557835200">- Fix incorrect patch-checking with symlinks and subrepos
  (CVE-2019-3902, bsc#1133035):
  hg-CVE-2019-3902-fix1.patch
  hg-CVE-2019-3902-fix2.patch
  hg-CVE-2019-3902-fix3.patch</changelog>
</package>
<package pkgid="0b91b5c9ef67e58b267f805437228d09299dc010b1b6d73f3170203c8366b17a" name="mercurial" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="lp152.7.3.1"/>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557835200">- Fix incorrect patch-checking with symlinks and subrepos
  (CVE-2019-3902, bsc#1133035):
  hg-CVE-2019-3902-fix1.patch
  hg-CVE-2019-3902-fix2.patch
  hg-CVE-2019-3902-fix3.patch</changelog>
</package>
<package pkgid="bece6bdb471ae9374c691e44ff020236bae509c10a42351ebc16dcbdfd337f16" name="mercurial-lang" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="lp152.7.3.1"/>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557835200">- Fix incorrect patch-checking with symlinks and subrepos
  (CVE-2019-3902, bsc#1133035):
  hg-CVE-2019-3902-fix1.patch
  hg-CVE-2019-3902-fix2.patch
  hg-CVE-2019-3902-fix3.patch</changelog>
</package>
<package pkgid="1508a6ff03e245061e10c976cba2dd9e83135d833501234c89b1fce4ac465327" name="nodejs10" arch="i586">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="56a70074b1b9af2fa4d62832b8ed5e6341835679ded9b4d5619c39dffa807462" name="nodejs10" arch="src">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="f923010083b8395d3d0563b748d4cc5dbf2d5e71792331685efb38a8daeb5039" name="nodejs10" arch="x86_64">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="f563bf50a9cd5db7169d74bd814d4d1826b21b8d0280f73fe811a81b41eaf4f1" name="nodejs10-devel" arch="i586">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="d13486b666cbc5a9cbf9d7d4618f96ea6cd19b305864b855e1956e6440c9546f" name="nodejs10-devel" arch="x86_64">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="1eaf1e51d6a2f395612f9b8e9fcb0a273c4e717dc1b7a827edf270b3594185b1" name="nodejs10-docs" arch="noarch">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="6b1ef1ee80d15e02876be773fd6a85b2bdba56e837c653dc2091b21440f9a09d" name="nodejs8" arch="i586">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="86b2929e6ded02c78bd6de0c9c350e4cd35c563b41db2ca595d3d9daacce3a5b" name="nodejs8" arch="src">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="9f4badcd36363bb9b13ec6a56a7ef1c556de527338beb0a9ea5de08a53815ee8" name="nodejs8" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="67cc9962bcfeb0f56261779929b917685b1b554a937d70e28bdb892f60529cc6" name="nodejs8-devel" arch="i586">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="567fdc73e8f47e5a328e032047d24b5ac97196ee4b6756ae240567556e57f8c5" name="nodejs8-devel" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="d75f1b5c221829ffc1811296ce6a4210e296a4b112a291dceebc0c26df7cb5f8" name="nodejs8-docs" arch="noarch">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="ac25187060196de0776dd63af52f25bdf56419162a8154054173c5d353daae23" name="npm10" arch="i586">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="00a9a989afc7873066ddd663f81a787a54fbcbf054df6183ee70a22f16bc80c7" name="npm10" arch="x86_64">
  <version epoch="0" ver="10.21.0" rel="lp152.2.3.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554638400">- Add _constraints file to avoid OOM errors</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557144000">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134208)
- Require user/group nobody for npm</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1559131200">- New upstream LTS version 10.16.0
  * deps:
    + upgrade npm to 6.9.0
    + upgrade openssl sources to 1.1.1b (for SLE-12 based systems)
    + upgrade libuv to 1.28.0 (for SLE-12 based systems)
    + upgrade to libuv 1.28.0
  * events: add once method to use promises with EventEmitter
  * n-api: mark thread-safe function as stable
  * repl: support top-level for-await-of
  * zlib: add brotli support
- openssl_1_1_1.patch: dropped, no longer needed
- fix_ci_tests.patch: drop onion handling in DNS, since this depends
  on 3rd party library
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564660800">- New upstream LTS version 10.16.1
  * deps: upgrade openssl sources to 1.1.1c (for SLE-12 based systems)
  * stream: do not unconditionally call _read() on resume()
  * worker: fix nullptr deref after MessagePort deser failure</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 10.16.3:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 10.16.2:
  * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in
    machines that have low entropy.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS version 10.17.0:
  * crypto:
    + add support for chacha20-poly1305 for AEAD
    + increase maxmem range from 32 to 53 bits
  * deps:
    + update npm to 6.11.3
    + upgrade openssl sources to 1.1.1d
  * dns: remove dns.promises experimental warning
  * fs: remove experimental warning for fs.promises
  * http: makes response.writeHead return the response
  * http2: makes response.writeHead return the response
  * n-api:
    + make func argument of napi_create_threadsafe_function optional
    + mark version 5 N-APIs as stable
    + implement date object
  * process: add --unhandled-rejections flag
  * stream:
    + implement Readable.from async iterator utility
    + make Symbol.asyncIterator support stable
- CVE-2019-13173.patch: dropped, no longer in upstream npm
- fix_build_with_openssl_1.1.1d.patch: upstreamed
- node-gyp-addon-gypi.patch, versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1572955200">- skip_no_console.patch: skip tests on build platforms where console
  is set to a dumb terminal</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1575374400">- Increase _constraints to allow all unit tests to execute</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS version 10.18.0:
  * deps: update npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1577448000">- node-gyp-addon-gypi.patch: Fix wrong path in gypi files (bsc#1159812)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1578657600">- New upstream LTS version 10.18.1:
  * http2: fix session memory accounting after pausing
  * n-api: correct bug in napi_get_last_error
  * tools: update tzdata to 2019c</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- New upstream LTS version 10.19.0:
  * fixes a remotely triggerable assertion on a TLS server via a
    crafted certificate string (CVE-2019-15604, bsc#1163104)
  * fixes an HTTP request smuggling vulnerability via malformed
    Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
  * trim HTTP header values of optional white space
    (CVE-2019-15606, bsc#1163103)
  * enabled stricter HTTP header parsing by default.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583150400">- openssl_rand_regression.patch: Add getrandom syscall definition
  for all Linux platforms. This fixes a runtime error in SLE-12
  (bnc#1162117)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1587988800">- New upstream LTS version 10.20.1:
  * buffer: add {read|write}Big[U]Int64{BE|LE} methods
  * build: macOS package notarization
  * deps:
    + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598)
    + upgrade openssl sources to 1.1.1e
    + upgrade to libuv 1.34.2
  * n-api:
    + add napi_get_all_property_names
    + add APIs for per-instance state management
    + define release 6
    + turn NAPI_CALL_INTO_MODULE into a function
  * tls:
    + expose keylog event on TLSSocket
    + support TLS min/max protocol defaults in CLI
  * url: handle quasi-WHATWG URLs in urlToOptions()
- openssl_rand_regression.patch: upstreamed
- versioned.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs10-devel when installing npm10</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- New upstream LTS version 10.21.0:
  * napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * deps: ICU-20958 Prevent SEGV_MAPERR in append
    (CVE-2020-10531, bsc#1166844)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs10 when intalling npm10 (bsc#1172728)</changelog>
</package>
<package pkgid="795029ae490beec7c9064a18e1f34c29f6c6948f7650658f722ed8d493c6c8bd" name="npm8" arch="i586">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="9d7ad37f446ee7dfa8c190dc5f49285c8bd8c0ca1bd867c483f69e9f28da3d46" name="npm8" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="lp152.3.4.1"/>
  <changelog author="adam.majer@suse.de" date="1543233600">- flaky_test_rerun.patch: Rerun failing tests in case of flakiness</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Enable armv6 build</changelog>
  <changelog author="adam.majer@suse.de" date="1546862400">- New upstream LTS release 8.15.0:
  * cli: add --max-http-header-size flag
  * http: add maxHeaderSize property
- Changes in LTS release 8.14.1:
  * http2: fix sequence of error/close events
- Changes in LTS release 8.14.0:
  * http:
    + Headers received by HTTP servers must not exceed 8192 bytes
    in total to prevent possible Denial of Service attacks.
    (CVE-2018-12121, bsc#1117626)
    + A timeout of 40 seconds now applies to servers receiving HTTP
    headers. This value can be adjusted with server.headersTimeout.
    Where headers are not completely received within this period,
    the socket is destroyed on the next received chunk. In
    conjunction with server.setTimeout(), this aids in protecting
    against excessive resource retention and possible
    Denial of Service. (CVE-2018-12122, bsc#1117627)
    + Two-byte characters are now strictly disallowed for the path
    option in HTTP client requests. Paths containing characters
    outside of the range \u0021 - \u00ff will now be rejected
    with a TypeError. This behavior can be reverted if necessary
    by supplying the --security-revert=CVE-2018-12116 command
    line argument (this is not recommended).
    (CVE-2018-12116, bsc#1117630)
  * url: Fix a bug that would allow a hostname being spoofed when
    parsing URLs with url.parse() with the 'javascript:' protocol.
    (CVE-2018-12123, bsc#1117629)
- Changes in LTS release 8.13.0:
  * assert: backport some assert commits
  * deps:
    + upgrade to libuv 1.23.2
    + V8: cherry-pick 64-bit hash seed commits
  * http: added aborted property to request
  * http2: no longer experimental
    + bump dependency of nghttp2 to 1.34.0
- fix_ci_tests.patch: Reduce timeout for test-http2-session-timeout
- skip_test_on_lowmem.patch: skip test on low-memory build machine
- env_shebang.patch: dropped in favour of programmatic update</changelog>
  <changelog author="adam.majer@suse.de" date="1549022400">- nodejs.keyring: update keyring to today's list as per
  https://github.com/nodejs/node</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551355200">- New upstream LTS release 8.15.1:
  * http: Further prevention of "Slowloris" attacks on HTTP and HTTPS
  connections by consistently applying the receive timeout set by
  server.headersTimeout to connections in keep-alive mode.
  (CVE-2019-5737, bsc#1127532)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1557230400">- openssl_1_1_1.patch: backport fixes for OpenSSL 1.1.1 (bsc#1134209)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1564401600">- CVE-2019-13173.patch: fix potential file overwrite via hardlink
  in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565352000">- npm_search_paths.patch: make sure that npm resolves its default
  config file like in all other versions, as /etc/nodejs/npmrc
  (bsc#1144919)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1565956800">- Update to 8.16.1:
  Security update regarding HTTP/2 Denial of Service vulnerabilities
  For details see,
  https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514,
  bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095,
  CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518,
  bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093)
- Changes in 8.16.0:
  * n-api:
    + add API for async functions
    + mark thread-safe functions as stable</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568808000">- Fix build with OpenSSL 1.1.1d (bsc#1149792)
  * https://github.com/nodejs/node/pull/29550
  * add fix_build_with_openssl_1.1.1d.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1570017600">- Add _constraints for aarch64 &amp; ppc64le to avoid build error</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1571918400">- New upstream LTS release 8.16.2:
  * deps: update OpenSSL to 1.0.2s</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
</package>
<package pkgid="2eb61aaf5092c0eec3cafd1a41526b6cde5be5e31a8bc5ad6820e93e8e94f803" name="profanity" arch="src">
  <version epoch="0" ver="0.9.4" rel="lp152.2.3.1"/>
  <changelog author="mvetter@suse.com" date="1474545600">- Fixing gh/boothj5/profanity/#860:
  profanity uses parts of the new API of libstrophe. But since
  the so name wasn't bumped this doesn't get autodetected.
  Adding the requires manually: Requires: libstrophe0 &gt;= 0.9.0</changelog>
  <changelog author="dheidler@suse.de" date="1478088000">- Switch to libmesode insted of libstrophe
  * This allows better SSL cert validation</changelog>
  <changelog author="jengelh@inai.de" date="1478433600">- Orthographic fixes.
- Remove useless BuildRequire on shlib package.</changelog>
  <changelog author="mvetter@suse.com" date="1486641600">- Update to 0.5.1:
  * Add prof.get_room_nick plugins api function
  * Add main.help.header theme option
  * Look for system TLS certificate path by default (/tls certpath)
  * Use service discovery to set account muc property
  * Allow clearing account muc and resource properties
  * Allow plugins to complete file paths with prof.filepath_completer_add function
  * Add encryption settings functions to plugins api
  * Allow plugins to block message sending on pre message send hooks
  * Bug fixes: https://github.com/boothj5/profanity/milestone/15?closed=1</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls/openssl from buildrequires</changelog>
  <changelog author="mvetter@suse.com" date="1521201600">- Compile profanity-mini with --disable-icons:
  Since we first do the standard build we need to disable the
  icons in the later build to really get rid of the GTK dependency</changelog>
  <changelog author="dheidler@suse.com" date="1521547200">- Enable C and Python plugin API</changelog>
  <changelog author="mvetter@suse.com" date="1548244800">- Update to 0.6.0 RC1:
  * Allow moving vertical window positions (/titlebar, /mainwin, /statusbar, /inputwin)
  * Allow loading/unloading all plugins (/plugins)
  * Allow installing plugins from directory (/plugins)
  * Allow uninstallation of plugins (/plugins uninstall)
  * Allow update of plugins (/plugins update)
  * Theme option for status bar time (statusbar.time)
  * Case/accent insensitive autocompletion
  * Shift tab to select previous autocomplete suggestion
  * Allow searching help (/help search_all|search_any)
  * Support for Legacy SSL
  * Allow caching of rooms (/rooms cache)
  * Add autocompletion for servername when listing rooms (/rooms service)
  * Allow showing/disabling tab number in statusbar (/statusbar show)
  * Adjust configure for OpenBSD
  * Use UUIDs instead of counter for messages
  * Support basic ad-hoc commands(xep-0050) (/command)
  * Add option to trust server's certificate (/connect, /account)
  * Add possibility to close windows via prof_win_close inputrc hook
  * Bug fixes: https://github.com/boothj5/profanity/milestone/16?closed=1</changelog>
  <changelog author="mvetter@suse.com" date="1550491200">- Update to 0.6.0:
  * No changes since RC1</changelog>
  <changelog author="mvetter@suse.com" date="1564574400">- Update to 0.7.0:
  * Fix plugin unload return code if just one plugin fails (#995)
  * Fix several typos
  * Fix some display indentation issues (#1073)
  * Fail plugin unload if the plugin doesnt exist
  * Improve encrypted message stub header by mentioning the encryption method
  * Fix GPG encryption (#997)
  * Redraw sceen after entry of PGP key (#906)
  * Fix support for case-sensitive account names (#725)
  * Fix /me display when highlighting user in MUCs (#950)
  * Fix `make dist` (0f0659a)
  * Fix use after free bug (#1044)
  * Fix segfault on connect with default account (#1046)
  * Implement OMEMO support (#1039, #658, #1070)
  * Add random string at the end of the default resource (#1053)
  * Fix handling of messages without ID in MUC (#1061)
  * Add library versioning to libprofanity (#973)
  * Add more customization: occupants indent (/occupants) (#690, #1072)
  * Add more customization: occupants header char (/occupants) (#690, #1074)
  * Add more customization: occupants wrap (/occupants) (#690, 125ca2f)
  * Add more customization: occupants char (/occupants) (#690, #1084)
  * Fix formatting for privileges on (a666f0d)
  * Fix usage of statusbar number in theme (#1078)
  * Fix Debian 32bit tests (#1091)
  * Fix unit tests (#1092)
  * Fix infinite loop on connection loss (#1103)
  * Don't clear saved account data in session_disconnect (#1106)
  * Cancel autoping timer on disconnect or connection loss (#1105)
  * Fix SIGABRT on connection loss (#1083)
  * Only print room history for new messages upon reconnect (#704, #1110)
  * Check if valid account before setting autoconnect (#1112)
  * Improve plugin load error message, in case built without support (cc697de)
  * Iterate up to 100 logfiles (#519)
  * Fix rejoining of MUCs upon reconnect (#1120)
  * Add option to set all window related time formats (#632, #1120)
  * Always check for directory changes with sendfile auto completion (#1154)
  * Fix several memory leaks (#1130, + plenty commits)
  * For details see https://github.com/profanity-im/profanity/milestone/17</changelog>
  <changelog author="mvetter@suse.com" date="1564574401">- Build both mini and standard with OMEMO enabled</changelog>
  <changelog author="mvetter@suse.com" date="1569326400">- Update to 0.7.1:
  * Fix copyright/info displayed email
  * Fix typos in OMEMO logs
  * Fix crash when jid has no not part (#1153, #1193)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580731200">- Update to 0.8.0:
  * OMEMO fingerprint autocompletion now considers only the contact in question (@paulfariello) (#1068)
  * Save and display oldest timestamp from delay tags (#1254)
  * Change theme handling (#1077)
  * /theme load themename not loads only the colours of a theme. So the users preferences don't get overwritten
  * /theme full-load themename loads the whole theme including preferences (like omemo.char)
  * Add gruvbox theme (@Misaflo) (#1259)
  * XEP-0092: Include OS name in /software answer.
  * See /os on|off
  * Add option to notify about version request via XEP-0092 and XEP-0232 via adv.notify.discoversion
  * setting in configuration file.
  * Add option to display MUC name or JID in titlebar: /titlebar use [name|jid].
  * Add /roster room use command to decide whether to display the MUC name or JID in the roster:
    /roster room use name to use the name of the MUC in the roster list.
    /roster room use jid to use the jid of the MUC in the roster list.
  * Fix decryption failure for messages sent from Converse.js (@paulfariello) (#1253)
  * Fix crash when OMEMO key is misconfigured (@paulfariello) (#1239)
  * Use OMEMO for offline MUC members (@paulfariello) (#1242)
  * Fix OMEMO 1on1 chats with psi+ (@svensp) (#1247)
  * Save occupants and roster chars (#1244)
  * Add support for downloading user avatars via XEP-0084 (#1240)
  * See /avatar
  * Add last read position marker trackbar (#1238)
  * Dont print error message if a valid setting function is called (#1237)
  * When printing configuration we often use the same command as setting but without any argument.
  * So far ths displayed "Invalid usage".
  * Add support for XEP-0392 consistent color generation for nicks (@aaptel and @jubalh) (#1191)
  * See /color, /occupants color, /roster color
  * Call ncurses resize function before move function (#1235)
  * Fix error when joining IRC via biboumi (#1230)
  * Fix stanza_get_child_by_name_and_from() strcmp (#1227)
  * Fix showing own messages twice in ejabberd mucs (#1223)
  * Allow setting of status message (which actually never worked before) (b846c49)
  * /status set online "This is my text"
  * /status set away bye
  * /status set away
  * Add option to store current line in history (irssi down arrow) (#200)
  * Standardize commands (#1116):
    /tls show on|of -&gt; /titlebar show|hide tls`
    /encwarn on|off -&gt; /titlebar show|hide encwarn
    /titlebar show|hide resource additionally to /resource titlebar on
    /titlebar show|hide presence additionally to /presence titlebar on
    /invite &lt;contact&gt; -&gt; `/invite send
    /invites -&gt; /invite list
    /decline -&gt; /invite decline
    /online, /away, /dnd, /chat, /xa -&gt; /status set online etc.
    /status -&gt; /status get
    /chlog on -&gt; /logging chat on (#1224)
    /grlog on -&gt; /logging group on (#1224)
    /group -&gt; /roster group (#1229)
  * Check omemo stanza names when iterating nodes (@aszlig) (#1217)
  * Add clipboard feature. See /paste (#1216)
  * Log MUC PM messages (#1214)
  * Improve forest theme
  * Change default text colors to default instead of white (@mdosch) (#1213) (#535)
  * Fix date display in chat history (#992)
  * Log incoming MUC messages if origin-id sais they dont come from us (#1201)
  * Support XEP-0359: Unique and Stable Stanza IDs (#1207)
  * To help us identify which MUC messages were sent by us.
  * Fix double _XOPEN_SOURCE definition (@pasis) (#1206)
  * Highlight unread messages with a different color in /wins (#895)
  * New theming option cmd.wins.unread
  * Improve MUC 1:1 logging (#1184)
  * Fix user messages double logged in MUC logs (#1201)
  * Fix 26 causes for memory leaks
  * Add /clear autocompletion and improve help (#855)
  * Allow multiple instances to write to account config via /reload
  * command that reloads the config file (#627)
  * Log message carbons to log file (#1181)
  * Include PYTHON_EXTRA_LIBS in libtool config (@mzagozen) (#1200)
  * Document how to block users in MUCS (#618)
  * Keyboard switch to select the next window with unread messages (#1114) (alt + a)
  * Keyboard switches (for moving to 20 windows instead of 10 (#1114) (alt + 1234567890qwertyuio)
  * Fix MUC history detection with older Prosody versions (#1190) See https://issues.prosody.im/1416
  * statusbar.current is a new theming option for currently selected tab (@quite) (#1195)
  * Code cleanup
  * Make /info more user friendly (#1194)
  * Add solarized theme (#1175, #1198, #1199) (@mdosch)
  * Set nonblocking mode for stderr (@pasis) (#1192)
  * Log alleged roster push (6cf06dc)
  * Allow colorization of history messages (#1170)
  * See main.text.history theming option
  * Fix crash if source jid doesn't contain the node part (@pasis) (#1153)
  * Add support for 256 colors (@aaptel and @jubalh) (#1177 and many commits)
  * We use the Xterm color names. See https://jonasjacek.github.io/colors
  * Don't render (all) delayed messages as MUC history (@weiss) (#1173)
  * Add possibility to specify alternative config file (10ca3e)
  * Use profanity -c ~/path/to/other/config
  * Don't print subscribed message if contact is already in roster (#1166)
  * Only save preferences when new /save command is issued (#1146)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581076800">- Update to 0.8.1:
  * Fix ending ncurses colors in rosterwin
  * Fix segfault when consistent nick colors where never in config (#1236)
  * Improve /clear behaviour to also clear the buffer. So a redraw doesn't bring
  * the content back.
  * Use unique IDs in stanzas when requesting avatars</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591617600">- Add -fcommon to fix build with gcc10 (boo#1160244)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591704000">- Update to 0.9.0:
  * Support for XEP-0308: Last Message Correction (#805)
    See `/correction` and `/correct`.
  * Code cleanup of UI and Message functions
  * Always send delivery receipts if they are enabled (#1268)
  * By default don't allow sending unencrypted files in an encrypted chat session (#1270) (@moppman and @jubalh)
    See `/omemo|otr|pgp sendfile`.
  * Add CI for OpenBSD via sr.ht (@wstrm)
  * OMEMO: switch to 12 byte IV for sending (#1272)
  * Allow UTF-8 symbols as OMEMO/OTR/PGP indicator char (#1264)
  * Make color of the trackbar configurable
    Use `main.trackbar` in themes.
  * Allow setting custom log file
    `profanity -f TEST` will log to `~/.local/share/profanity/logs/TEST.log`.
  * Send proper OS names for OpenBSD and NetBSD if `/os` is enabled
  * Fix plenty memory leaks (@pasis and @jubalh)
  * XEP-0084: Add option to open avatars directly (#1281)
    `/avatar odin@valhalla.org` became `/avatar get odin@valhalla.org`
    New is:
    `/executable avatar feh`
    `/avatar open odin@valhalla.org`
    xdg-open is used by default. So it will take your default application.
  * Enable popular features by default.
    For a nicer out of the box experience we enable:
  - allow message correction
  - sending receipts
  - enabling carbons
  - type/chat states
  * Add slashguard feature to prevent sending commands with typos
    Should protect against `q/uit` or ` /quit`.
    See `/slashguard`.
  * Optionally display both MUC name and MUC JID in titlebar (#1284)
    `/titlebar use name|jid` -&gt; `/titlebar show|hide name|jid`.
  * Add option to define a theme at startup (#1286)
    `/profanity -t bios`
  * Add setting to not colorize own nick if XEP-0392 is enabled (#1288)
    `/color own on|off`.
  * Add new theme: jubalian
  * Fix docker related CI tests (#1294)
  * Fix OMEMO autocompletion (75a43f, df23c3)
  * Modify our README
  * Store logs in SQLite backend (#1282)
  * Request OMEMO device list only for non anon MUCs (#1315) (@DebXWoody)
  * Don't display MUC history in one uniform colour, instead colour messages like regular ones (#1261)
  * Fix autocompletion for `/software` in regular chat windows (#1337)
  * XEP-0092: Make it possible to ask servers for their version (#1338)
  * Add possibility to easily open URLs (#1340, #1348)
    `/executable urlopen firefox`
    `/urlopen &lt;tab&gt;`
  * Display hint when window is scrolled (#1289)
    Theme via `titlebar.scrolled`
  * Add option to hide windows with no new messages in statusbar (#1285)
    `/statusbar show|hide read`
  * Support bookmark names (#697)
  * Preserve Gajims minimize flag in bookmarks (#1326)
  * Don't show resource in titlebar in narrow windows if it is too long (#715)
  * Improve autoping (#1333, #1315) (@DebXWoody)
  * Fix titlebar status display when using PGP (#1327) (@DebXWoody)
  * OMEMO: Only request "current" item (#1329) (@DebXWoody)
  * Add feature to ignore the autojoin flag for bookmarks (#1115)
    Helps users who want to autojoin MUCs with most clients but not with all.
    `/bookmark ignore`
  * Fix edge case where contacts get displayed as offline when they are online (3d7a31)
  * Add option for legacy authentication (#1236) (@pasis)
    `/connect &lt;account&gt; [auth default|legacy]`
    `/account &lt;account&gt; set auth default|legacy`
  * All issues: https://github.com/profanity-im/profanity/milestone/19</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591876800">- Update to 0.9.1:
  * Make legacy auth optional (#1360) (@pasis)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592049600">- Update to 0.9.2:
  * Dont manipulate pointer from getenv (#1357)
  * Fix reading/writing linked files (#1362)
  * Use gnu99 C standard (#1357)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592568000">- Update to 0.9.3:
  * Fix expansion in eval_password (#1364)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Update to 0.9.4:
  * Fix NULL terminated list (#1367)
  * Add missing string.h (#1372)
  * Fix gcc warnings for cygwin (#1373)</changelog>
</package>
<package pkgid="f2c3eef865e528917a03a6e0f9821a65babb6afc7bce2677bf639c46640fd87e" name="profanity" arch="x86_64">
  <version epoch="0" ver="0.9.4" rel="lp152.2.3.1"/>
  <changelog author="mvetter@suse.com" date="1474545600">- Fixing gh/boothj5/profanity/#860:
  profanity uses parts of the new API of libstrophe. But since
  the so name wasn't bumped this doesn't get autodetected.
  Adding the requires manually: Requires: libstrophe0 &gt;= 0.9.0</changelog>
  <changelog author="dheidler@suse.de" date="1478088000">- Switch to libmesode insted of libstrophe
  * This allows better SSL cert validation</changelog>
  <changelog author="jengelh@inai.de" date="1478433600">- Orthographic fixes.
- Remove useless BuildRequire on shlib package.</changelog>
  <changelog author="mvetter@suse.com" date="1486641600">- Update to 0.5.1:
  * Add prof.get_room_nick plugins api function
  * Add main.help.header theme option
  * Look for system TLS certificate path by default (/tls certpath)
  * Use service discovery to set account muc property
  * Allow clearing account muc and resource properties
  * Allow plugins to complete file paths with prof.filepath_completer_add function
  * Add encryption settings functions to plugins api
  * Allow plugins to block message sending on pre message send hooks
  * Bug fixes: https://github.com/boothj5/profanity/milestone/15?closed=1</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls/openssl from buildrequires</changelog>
  <changelog author="mvetter@suse.com" date="1521201600">- Compile profanity-mini with --disable-icons:
  Since we first do the standard build we need to disable the
  icons in the later build to really get rid of the GTK dependency</changelog>
  <changelog author="dheidler@suse.com" date="1521547200">- Enable C and Python plugin API</changelog>
  <changelog author="mvetter@suse.com" date="1548244800">- Update to 0.6.0 RC1:
  * Allow moving vertical window positions (/titlebar, /mainwin, /statusbar, /inputwin)
  * Allow loading/unloading all plugins (/plugins)
  * Allow installing plugins from directory (/plugins)
  * Allow uninstallation of plugins (/plugins uninstall)
  * Allow update of plugins (/plugins update)
  * Theme option for status bar time (statusbar.time)
  * Case/accent insensitive autocompletion
  * Shift tab to select previous autocomplete suggestion
  * Allow searching help (/help search_all|search_any)
  * Support for Legacy SSL
  * Allow caching of rooms (/rooms cache)
  * Add autocompletion for servername when listing rooms (/rooms service)
  * Allow showing/disabling tab number in statusbar (/statusbar show)
  * Adjust configure for OpenBSD
  * Use UUIDs instead of counter for messages
  * Support basic ad-hoc commands(xep-0050) (/command)
  * Add option to trust server's certificate (/connect, /account)
  * Add possibility to close windows via prof_win_close inputrc hook
  * Bug fixes: https://github.com/boothj5/profanity/milestone/16?closed=1</changelog>
  <changelog author="mvetter@suse.com" date="1550491200">- Update to 0.6.0:
  * No changes since RC1</changelog>
  <changelog author="mvetter@suse.com" date="1564574400">- Update to 0.7.0:
  * Fix plugin unload return code if just one plugin fails (#995)
  * Fix several typos
  * Fix some display indentation issues (#1073)
  * Fail plugin unload if the plugin doesnt exist
  * Improve encrypted message stub header by mentioning the encryption method
  * Fix GPG encryption (#997)
  * Redraw sceen after entry of PGP key (#906)
  * Fix support for case-sensitive account names (#725)
  * Fix /me display when highlighting user in MUCs (#950)
  * Fix `make dist` (0f0659a)
  * Fix use after free bug (#1044)
  * Fix segfault on connect with default account (#1046)
  * Implement OMEMO support (#1039, #658, #1070)
  * Add random string at the end of the default resource (#1053)
  * Fix handling of messages without ID in MUC (#1061)
  * Add library versioning to libprofanity (#973)
  * Add more customization: occupants indent (/occupants) (#690, #1072)
  * Add more customization: occupants header char (/occupants) (#690, #1074)
  * Add more customization: occupants wrap (/occupants) (#690, 125ca2f)
  * Add more customization: occupants char (/occupants) (#690, #1084)
  * Fix formatting for privileges on (a666f0d)
  * Fix usage of statusbar number in theme (#1078)
  * Fix Debian 32bit tests (#1091)
  * Fix unit tests (#1092)
  * Fix infinite loop on connection loss (#1103)
  * Don't clear saved account data in session_disconnect (#1106)
  * Cancel autoping timer on disconnect or connection loss (#1105)
  * Fix SIGABRT on connection loss (#1083)
  * Only print room history for new messages upon reconnect (#704, #1110)
  * Check if valid account before setting autoconnect (#1112)
  * Improve plugin load error message, in case built without support (cc697de)
  * Iterate up to 100 logfiles (#519)
  * Fix rejoining of MUCs upon reconnect (#1120)
  * Add option to set all window related time formats (#632, #1120)
  * Always check for directory changes with sendfile auto completion (#1154)
  * Fix several memory leaks (#1130, + plenty commits)
  * For details see https://github.com/profanity-im/profanity/milestone/17</changelog>
  <changelog author="mvetter@suse.com" date="1564574401">- Build both mini and standard with OMEMO enabled</changelog>
  <changelog author="mvetter@suse.com" date="1569326400">- Update to 0.7.1:
  * Fix copyright/info displayed email
  * Fix typos in OMEMO logs
  * Fix crash when jid has no not part (#1153, #1193)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580731200">- Update to 0.8.0:
  * OMEMO fingerprint autocompletion now considers only the contact in question (@paulfariello) (#1068)
  * Save and display oldest timestamp from delay tags (#1254)
  * Change theme handling (#1077)
  * /theme load themename not loads only the colours of a theme. So the users preferences don't get overwritten
  * /theme full-load themename loads the whole theme including preferences (like omemo.char)
  * Add gruvbox theme (@Misaflo) (#1259)
  * XEP-0092: Include OS name in /software answer.
  * See /os on|off
  * Add option to notify about version request via XEP-0092 and XEP-0232 via adv.notify.discoversion
  * setting in configuration file.
  * Add option to display MUC name or JID in titlebar: /titlebar use [name|jid].
  * Add /roster room use command to decide whether to display the MUC name or JID in the roster:
    /roster room use name to use the name of the MUC in the roster list.
    /roster room use jid to use the jid of the MUC in the roster list.
  * Fix decryption failure for messages sent from Converse.js (@paulfariello) (#1253)
  * Fix crash when OMEMO key is misconfigured (@paulfariello) (#1239)
  * Use OMEMO for offline MUC members (@paulfariello) (#1242)
  * Fix OMEMO 1on1 chats with psi+ (@svensp) (#1247)
  * Save occupants and roster chars (#1244)
  * Add support for downloading user avatars via XEP-0084 (#1240)
  * See /avatar
  * Add last read position marker trackbar (#1238)
  * Dont print error message if a valid setting function is called (#1237)
  * When printing configuration we often use the same command as setting but without any argument.
  * So far ths displayed "Invalid usage".
  * Add support for XEP-0392 consistent color generation for nicks (@aaptel and @jubalh) (#1191)
  * See /color, /occupants color, /roster color
  * Call ncurses resize function before move function (#1235)
  * Fix error when joining IRC via biboumi (#1230)
  * Fix stanza_get_child_by_name_and_from() strcmp (#1227)
  * Fix showing own messages twice in ejabberd mucs (#1223)
  * Allow setting of status message (which actually never worked before) (b846c49)
  * /status set online "This is my text"
  * /status set away bye
  * /status set away
  * Add option to store current line in history (irssi down arrow) (#200)
  * Standardize commands (#1116):
    /tls show on|of -&gt; /titlebar show|hide tls`
    /encwarn on|off -&gt; /titlebar show|hide encwarn
    /titlebar show|hide resource additionally to /resource titlebar on
    /titlebar show|hide presence additionally to /presence titlebar on
    /invite &lt;contact&gt; -&gt; `/invite send
    /invites -&gt; /invite list
    /decline -&gt; /invite decline
    /online, /away, /dnd, /chat, /xa -&gt; /status set online etc.
    /status -&gt; /status get
    /chlog on -&gt; /logging chat on (#1224)
    /grlog on -&gt; /logging group on (#1224)
    /group -&gt; /roster group (#1229)
  * Check omemo stanza names when iterating nodes (@aszlig) (#1217)
  * Add clipboard feature. See /paste (#1216)
  * Log MUC PM messages (#1214)
  * Improve forest theme
  * Change default text colors to default instead of white (@mdosch) (#1213) (#535)
  * Fix date display in chat history (#992)
  * Log incoming MUC messages if origin-id sais they dont come from us (#1201)
  * Support XEP-0359: Unique and Stable Stanza IDs (#1207)
  * To help us identify which MUC messages were sent by us.
  * Fix double _XOPEN_SOURCE definition (@pasis) (#1206)
  * Highlight unread messages with a different color in /wins (#895)
  * New theming option cmd.wins.unread
  * Improve MUC 1:1 logging (#1184)
  * Fix user messages double logged in MUC logs (#1201)
  * Fix 26 causes for memory leaks
  * Add /clear autocompletion and improve help (#855)
  * Allow multiple instances to write to account config via /reload
  * command that reloads the config file (#627)
  * Log message carbons to log file (#1181)
  * Include PYTHON_EXTRA_LIBS in libtool config (@mzagozen) (#1200)
  * Document how to block users in MUCS (#618)
  * Keyboard switch to select the next window with unread messages (#1114) (alt + a)
  * Keyboard switches (for moving to 20 windows instead of 10 (#1114) (alt + 1234567890qwertyuio)
  * Fix MUC history detection with older Prosody versions (#1190) See https://issues.prosody.im/1416
  * statusbar.current is a new theming option for currently selected tab (@quite) (#1195)
  * Code cleanup
  * Make /info more user friendly (#1194)
  * Add solarized theme (#1175, #1198, #1199) (@mdosch)
  * Set nonblocking mode for stderr (@pasis) (#1192)
  * Log alleged roster push (6cf06dc)
  * Allow colorization of history messages (#1170)
  * See main.text.history theming option
  * Fix crash if source jid doesn't contain the node part (@pasis) (#1153)
  * Add support for 256 colors (@aaptel and @jubalh) (#1177 and many commits)
  * We use the Xterm color names. See https://jonasjacek.github.io/colors
  * Don't render (all) delayed messages as MUC history (@weiss) (#1173)
  * Add possibility to specify alternative config file (10ca3e)
  * Use profanity -c ~/path/to/other/config
  * Don't print subscribed message if contact is already in roster (#1166)
  * Only save preferences when new /save command is issued (#1146)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581076800">- Update to 0.8.1:
  * Fix ending ncurses colors in rosterwin
  * Fix segfault when consistent nick colors where never in config (#1236)
  * Improve /clear behaviour to also clear the buffer. So a redraw doesn't bring
  * the content back.
  * Use unique IDs in stanzas when requesting avatars</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591617600">- Add -fcommon to fix build with gcc10 (boo#1160244)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591704000">- Update to 0.9.0:
  * Support for XEP-0308: Last Message Correction (#805)
    See `/correction` and `/correct`.
  * Code cleanup of UI and Message functions
  * Always send delivery receipts if they are enabled (#1268)
  * By default don't allow sending unencrypted files in an encrypted chat session (#1270) (@moppman and @jubalh)
    See `/omemo|otr|pgp sendfile`.
  * Add CI for OpenBSD via sr.ht (@wstrm)
  * OMEMO: switch to 12 byte IV for sending (#1272)
  * Allow UTF-8 symbols as OMEMO/OTR/PGP indicator char (#1264)
  * Make color of the trackbar configurable
    Use `main.trackbar` in themes.
  * Allow setting custom log file
    `profanity -f TEST` will log to `~/.local/share/profanity/logs/TEST.log`.
  * Send proper OS names for OpenBSD and NetBSD if `/os` is enabled
  * Fix plenty memory leaks (@pasis and @jubalh)
  * XEP-0084: Add option to open avatars directly (#1281)
    `/avatar odin@valhalla.org` became `/avatar get odin@valhalla.org`
    New is:
    `/executable avatar feh`
    `/avatar open odin@valhalla.org`
    xdg-open is used by default. So it will take your default application.
  * Enable popular features by default.
    For a nicer out of the box experience we enable:
  - allow message correction
  - sending receipts
  - enabling carbons
  - type/chat states
  * Add slashguard feature to prevent sending commands with typos
    Should protect against `q/uit` or ` /quit`.
    See `/slashguard`.
  * Optionally display both MUC name and MUC JID in titlebar (#1284)
    `/titlebar use name|jid` -&gt; `/titlebar show|hide name|jid`.
  * Add option to define a theme at startup (#1286)
    `/profanity -t bios`
  * Add setting to not colorize own nick if XEP-0392 is enabled (#1288)
    `/color own on|off`.
  * Add new theme: jubalian
  * Fix docker related CI tests (#1294)
  * Fix OMEMO autocompletion (75a43f, df23c3)
  * Modify our README
  * Store logs in SQLite backend (#1282)
  * Request OMEMO device list only for non anon MUCs (#1315) (@DebXWoody)
  * Don't display MUC history in one uniform colour, instead colour messages like regular ones (#1261)
  * Fix autocompletion for `/software` in regular chat windows (#1337)
  * XEP-0092: Make it possible to ask servers for their version (#1338)
  * Add possibility to easily open URLs (#1340, #1348)
    `/executable urlopen firefox`
    `/urlopen &lt;tab&gt;`
  * Display hint when window is scrolled (#1289)
    Theme via `titlebar.scrolled`
  * Add option to hide windows with no new messages in statusbar (#1285)
    `/statusbar show|hide read`
  * Support bookmark names (#697)
  * Preserve Gajims minimize flag in bookmarks (#1326)
  * Don't show resource in titlebar in narrow windows if it is too long (#715)
  * Improve autoping (#1333, #1315) (@DebXWoody)
  * Fix titlebar status display when using PGP (#1327) (@DebXWoody)
  * OMEMO: Only request "current" item (#1329) (@DebXWoody)
  * Add feature to ignore the autojoin flag for bookmarks (#1115)
    Helps users who want to autojoin MUCs with most clients but not with all.
    `/bookmark ignore`
  * Fix edge case where contacts get displayed as offline when they are online (3d7a31)
  * Add option for legacy authentication (#1236) (@pasis)
    `/connect &lt;account&gt; [auth default|legacy]`
    `/account &lt;account&gt; set auth default|legacy`
  * All issues: https://github.com/profanity-im/profanity/milestone/19</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591876800">- Update to 0.9.1:
  * Make legacy auth optional (#1360) (@pasis)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592049600">- Update to 0.9.2:
  * Dont manipulate pointer from getenv (#1357)
  * Fix reading/writing linked files (#1362)
  * Use gnu99 C standard (#1357)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592568000">- Update to 0.9.3:
  * Fix expansion in eval_password (#1364)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Update to 0.9.4:
  * Fix NULL terminated list (#1367)
  * Add missing string.h (#1372)
  * Fix gcc warnings for cygwin (#1373)</changelog>
</package>
<package pkgid="3aa0d765ce98d547b2f44115434a3e4eb4ba859618a7c655c9853b964e465bfa" name="profanity-mini" arch="x86_64">
  <version epoch="0" ver="0.9.4" rel="lp152.2.3.1"/>
  <changelog author="mvetter@suse.com" date="1474545600">- Fixing gh/boothj5/profanity/#860:
  profanity uses parts of the new API of libstrophe. But since
  the so name wasn't bumped this doesn't get autodetected.
  Adding the requires manually: Requires: libstrophe0 &gt;= 0.9.0</changelog>
  <changelog author="dheidler@suse.de" date="1478088000">- Switch to libmesode insted of libstrophe
  * This allows better SSL cert validation</changelog>
  <changelog author="jengelh@inai.de" date="1478433600">- Orthographic fixes.
- Remove useless BuildRequire on shlib package.</changelog>
  <changelog author="mvetter@suse.com" date="1486641600">- Update to 0.5.1:
  * Add prof.get_room_nick plugins api function
  * Add main.help.header theme option
  * Look for system TLS certificate path by default (/tls certpath)
  * Use service discovery to set account muc property
  * Allow clearing account muc and resource properties
  * Allow plugins to complete file paths with prof.filepath_completer_add function
  * Add encryption settings functions to plugins api
  * Allow plugins to block message sending on pre message send hooks
  * Bug fixes: https://github.com/boothj5/profanity/milestone/15?closed=1</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls/openssl from buildrequires</changelog>
  <changelog author="mvetter@suse.com" date="1521201600">- Compile profanity-mini with --disable-icons:
  Since we first do the standard build we need to disable the
  icons in the later build to really get rid of the GTK dependency</changelog>
  <changelog author="dheidler@suse.com" date="1521547200">- Enable C and Python plugin API</changelog>
  <changelog author="mvetter@suse.com" date="1548244800">- Update to 0.6.0 RC1:
  * Allow moving vertical window positions (/titlebar, /mainwin, /statusbar, /inputwin)
  * Allow loading/unloading all plugins (/plugins)
  * Allow installing plugins from directory (/plugins)
  * Allow uninstallation of plugins (/plugins uninstall)
  * Allow update of plugins (/plugins update)
  * Theme option for status bar time (statusbar.time)
  * Case/accent insensitive autocompletion
  * Shift tab to select previous autocomplete suggestion
  * Allow searching help (/help search_all|search_any)
  * Support for Legacy SSL
  * Allow caching of rooms (/rooms cache)
  * Add autocompletion for servername when listing rooms (/rooms service)
  * Allow showing/disabling tab number in statusbar (/statusbar show)
  * Adjust configure for OpenBSD
  * Use UUIDs instead of counter for messages
  * Support basic ad-hoc commands(xep-0050) (/command)
  * Add option to trust server's certificate (/connect, /account)
  * Add possibility to close windows via prof_win_close inputrc hook
  * Bug fixes: https://github.com/boothj5/profanity/milestone/16?closed=1</changelog>
  <changelog author="mvetter@suse.com" date="1550491200">- Update to 0.6.0:
  * No changes since RC1</changelog>
  <changelog author="mvetter@suse.com" date="1564574400">- Update to 0.7.0:
  * Fix plugin unload return code if just one plugin fails (#995)
  * Fix several typos
  * Fix some display indentation issues (#1073)
  * Fail plugin unload if the plugin doesnt exist
  * Improve encrypted message stub header by mentioning the encryption method
  * Fix GPG encryption (#997)
  * Redraw sceen after entry of PGP key (#906)
  * Fix support for case-sensitive account names (#725)
  * Fix /me display when highlighting user in MUCs (#950)
  * Fix `make dist` (0f0659a)
  * Fix use after free bug (#1044)
  * Fix segfault on connect with default account (#1046)
  * Implement OMEMO support (#1039, #658, #1070)
  * Add random string at the end of the default resource (#1053)
  * Fix handling of messages without ID in MUC (#1061)
  * Add library versioning to libprofanity (#973)
  * Add more customization: occupants indent (/occupants) (#690, #1072)
  * Add more customization: occupants header char (/occupants) (#690, #1074)
  * Add more customization: occupants wrap (/occupants) (#690, 125ca2f)
  * Add more customization: occupants char (/occupants) (#690, #1084)
  * Fix formatting for privileges on (a666f0d)
  * Fix usage of statusbar number in theme (#1078)
  * Fix Debian 32bit tests (#1091)
  * Fix unit tests (#1092)
  * Fix infinite loop on connection loss (#1103)
  * Don't clear saved account data in session_disconnect (#1106)
  * Cancel autoping timer on disconnect or connection loss (#1105)
  * Fix SIGABRT on connection loss (#1083)
  * Only print room history for new messages upon reconnect (#704, #1110)
  * Check if valid account before setting autoconnect (#1112)
  * Improve plugin load error message, in case built without support (cc697de)
  * Iterate up to 100 logfiles (#519)
  * Fix rejoining of MUCs upon reconnect (#1120)
  * Add option to set all window related time formats (#632, #1120)
  * Always check for directory changes with sendfile auto completion (#1154)
  * Fix several memory leaks (#1130, + plenty commits)
  * For details see https://github.com/profanity-im/profanity/milestone/17</changelog>
  <changelog author="mvetter@suse.com" date="1564574401">- Build both mini and standard with OMEMO enabled</changelog>
  <changelog author="mvetter@suse.com" date="1569326400">- Update to 0.7.1:
  * Fix copyright/info displayed email
  * Fix typos in OMEMO logs
  * Fix crash when jid has no not part (#1153, #1193)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580731200">- Update to 0.8.0:
  * OMEMO fingerprint autocompletion now considers only the contact in question (@paulfariello) (#1068)
  * Save and display oldest timestamp from delay tags (#1254)
  * Change theme handling (#1077)
  * /theme load themename not loads only the colours of a theme. So the users preferences don't get overwritten
  * /theme full-load themename loads the whole theme including preferences (like omemo.char)
  * Add gruvbox theme (@Misaflo) (#1259)
  * XEP-0092: Include OS name in /software answer.
  * See /os on|off
  * Add option to notify about version request via XEP-0092 and XEP-0232 via adv.notify.discoversion
  * setting in configuration file.
  * Add option to display MUC name or JID in titlebar: /titlebar use [name|jid].
  * Add /roster room use command to decide whether to display the MUC name or JID in the roster:
    /roster room use name to use the name of the MUC in the roster list.
    /roster room use jid to use the jid of the MUC in the roster list.
  * Fix decryption failure for messages sent from Converse.js (@paulfariello) (#1253)
  * Fix crash when OMEMO key is misconfigured (@paulfariello) (#1239)
  * Use OMEMO for offline MUC members (@paulfariello) (#1242)
  * Fix OMEMO 1on1 chats with psi+ (@svensp) (#1247)
  * Save occupants and roster chars (#1244)
  * Add support for downloading user avatars via XEP-0084 (#1240)
  * See /avatar
  * Add last read position marker trackbar (#1238)
  * Dont print error message if a valid setting function is called (#1237)
  * When printing configuration we often use the same command as setting but without any argument.
  * So far ths displayed "Invalid usage".
  * Add support for XEP-0392 consistent color generation for nicks (@aaptel and @jubalh) (#1191)
  * See /color, /occupants color, /roster color
  * Call ncurses resize function before move function (#1235)
  * Fix error when joining IRC via biboumi (#1230)
  * Fix stanza_get_child_by_name_and_from() strcmp (#1227)
  * Fix showing own messages twice in ejabberd mucs (#1223)
  * Allow setting of status message (which actually never worked before) (b846c49)
  * /status set online "This is my text"
  * /status set away bye
  * /status set away
  * Add option to store current line in history (irssi down arrow) (#200)
  * Standardize commands (#1116):
    /tls show on|of -&gt; /titlebar show|hide tls`
    /encwarn on|off -&gt; /titlebar show|hide encwarn
    /titlebar show|hide resource additionally to /resource titlebar on
    /titlebar show|hide presence additionally to /presence titlebar on
    /invite &lt;contact&gt; -&gt; `/invite send
    /invites -&gt; /invite list
    /decline -&gt; /invite decline
    /online, /away, /dnd, /chat, /xa -&gt; /status set online etc.
    /status -&gt; /status get
    /chlog on -&gt; /logging chat on (#1224)
    /grlog on -&gt; /logging group on (#1224)
    /group -&gt; /roster group (#1229)
  * Check omemo stanza names when iterating nodes (@aszlig) (#1217)
  * Add clipboard feature. See /paste (#1216)
  * Log MUC PM messages (#1214)
  * Improve forest theme
  * Change default text colors to default instead of white (@mdosch) (#1213) (#535)
  * Fix date display in chat history (#992)
  * Log incoming MUC messages if origin-id sais they dont come from us (#1201)
  * Support XEP-0359: Unique and Stable Stanza IDs (#1207)
  * To help us identify which MUC messages were sent by us.
  * Fix double _XOPEN_SOURCE definition (@pasis) (#1206)
  * Highlight unread messages with a different color in /wins (#895)
  * New theming option cmd.wins.unread
  * Improve MUC 1:1 logging (#1184)
  * Fix user messages double logged in MUC logs (#1201)
  * Fix 26 causes for memory leaks
  * Add /clear autocompletion and improve help (#855)
  * Allow multiple instances to write to account config via /reload
  * command that reloads the config file (#627)
  * Log message carbons to log file (#1181)
  * Include PYTHON_EXTRA_LIBS in libtool config (@mzagozen) (#1200)
  * Document how to block users in MUCS (#618)
  * Keyboard switch to select the next window with unread messages (#1114) (alt + a)
  * Keyboard switches (for moving to 20 windows instead of 10 (#1114) (alt + 1234567890qwertyuio)
  * Fix MUC history detection with older Prosody versions (#1190) See https://issues.prosody.im/1416
  * statusbar.current is a new theming option for currently selected tab (@quite) (#1195)
  * Code cleanup
  * Make /info more user friendly (#1194)
  * Add solarized theme (#1175, #1198, #1199) (@mdosch)
  * Set nonblocking mode for stderr (@pasis) (#1192)
  * Log alleged roster push (6cf06dc)
  * Allow colorization of history messages (#1170)
  * See main.text.history theming option
  * Fix crash if source jid doesn't contain the node part (@pasis) (#1153)
  * Add support for 256 colors (@aaptel and @jubalh) (#1177 and many commits)
  * We use the Xterm color names. See https://jonasjacek.github.io/colors
  * Don't render (all) delayed messages as MUC history (@weiss) (#1173)
  * Add possibility to specify alternative config file (10ca3e)
  * Use profanity -c ~/path/to/other/config
  * Don't print subscribed message if contact is already in roster (#1166)
  * Only save preferences when new /save command is issued (#1146)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581076800">- Update to 0.8.1:
  * Fix ending ncurses colors in rosterwin
  * Fix segfault when consistent nick colors where never in config (#1236)
  * Improve /clear behaviour to also clear the buffer. So a redraw doesn't bring
  * the content back.
  * Use unique IDs in stanzas when requesting avatars</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591617600">- Add -fcommon to fix build with gcc10 (boo#1160244)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591704000">- Update to 0.9.0:
  * Support for XEP-0308: Last Message Correction (#805)
    See `/correction` and `/correct`.
  * Code cleanup of UI and Message functions
  * Always send delivery receipts if they are enabled (#1268)
  * By default don't allow sending unencrypted files in an encrypted chat session (#1270) (@moppman and @jubalh)
    See `/omemo|otr|pgp sendfile`.
  * Add CI for OpenBSD via sr.ht (@wstrm)
  * OMEMO: switch to 12 byte IV for sending (#1272)
  * Allow UTF-8 symbols as OMEMO/OTR/PGP indicator char (#1264)
  * Make color of the trackbar configurable
    Use `main.trackbar` in themes.
  * Allow setting custom log file
    `profanity -f TEST` will log to `~/.local/share/profanity/logs/TEST.log`.
  * Send proper OS names for OpenBSD and NetBSD if `/os` is enabled
  * Fix plenty memory leaks (@pasis and @jubalh)
  * XEP-0084: Add option to open avatars directly (#1281)
    `/avatar odin@valhalla.org` became `/avatar get odin@valhalla.org`
    New is:
    `/executable avatar feh`
    `/avatar open odin@valhalla.org`
    xdg-open is used by default. So it will take your default application.
  * Enable popular features by default.
    For a nicer out of the box experience we enable:
  - allow message correction
  - sending receipts
  - enabling carbons
  - type/chat states
  * Add slashguard feature to prevent sending commands with typos
    Should protect against `q/uit` or ` /quit`.
    See `/slashguard`.
  * Optionally display both MUC name and MUC JID in titlebar (#1284)
    `/titlebar use name|jid` -&gt; `/titlebar show|hide name|jid`.
  * Add option to define a theme at startup (#1286)
    `/profanity -t bios`
  * Add setting to not colorize own nick if XEP-0392 is enabled (#1288)
    `/color own on|off`.
  * Add new theme: jubalian
  * Fix docker related CI tests (#1294)
  * Fix OMEMO autocompletion (75a43f, df23c3)
  * Modify our README
  * Store logs in SQLite backend (#1282)
  * Request OMEMO device list only for non anon MUCs (#1315) (@DebXWoody)
  * Don't display MUC history in one uniform colour, instead colour messages like regular ones (#1261)
  * Fix autocompletion for `/software` in regular chat windows (#1337)
  * XEP-0092: Make it possible to ask servers for their version (#1338)
  * Add possibility to easily open URLs (#1340, #1348)
    `/executable urlopen firefox`
    `/urlopen &lt;tab&gt;`
  * Display hint when window is scrolled (#1289)
    Theme via `titlebar.scrolled`
  * Add option to hide windows with no new messages in statusbar (#1285)
    `/statusbar show|hide read`
  * Support bookmark names (#697)
  * Preserve Gajims minimize flag in bookmarks (#1326)
  * Don't show resource in titlebar in narrow windows if it is too long (#715)
  * Improve autoping (#1333, #1315) (@DebXWoody)
  * Fix titlebar status display when using PGP (#1327) (@DebXWoody)
  * OMEMO: Only request "current" item (#1329) (@DebXWoody)
  * Add feature to ignore the autojoin flag for bookmarks (#1115)
    Helps users who want to autojoin MUCs with most clients but not with all.
    `/bookmark ignore`
  * Fix edge case where contacts get displayed as offline when they are online (3d7a31)
  * Add option for legacy authentication (#1236) (@pasis)
    `/connect &lt;account&gt; [auth default|legacy]`
    `/account &lt;account&gt; set auth default|legacy`
  * All issues: https://github.com/profanity-im/profanity/milestone/19</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591876800">- Update to 0.9.1:
  * Make legacy auth optional (#1360) (@pasis)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592049600">- Update to 0.9.2:
  * Dont manipulate pointer from getenv (#1357)
  * Fix reading/writing linked files (#1362)
  * Use gnu99 C standard (#1357)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592568000">- Update to 0.9.3:
  * Fix expansion in eval_password (#1364)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Update to 0.9.4:
  * Fix NULL terminated list (#1367)
  * Add missing string.h (#1372)
  * Fix gcc warnings for cygwin (#1373)</changelog>
</package>
<package pkgid="df062ce5dfbd8e12c03502349aba24809bc4da6b29bfbbb0a298582bd9e5f952" name="profanity-standard" arch="x86_64">
  <version epoch="0" ver="0.9.4" rel="lp152.2.3.1"/>
  <changelog author="mvetter@suse.com" date="1474545600">- Fixing gh/boothj5/profanity/#860:
  profanity uses parts of the new API of libstrophe. But since
  the so name wasn't bumped this doesn't get autodetected.
  Adding the requires manually: Requires: libstrophe0 &gt;= 0.9.0</changelog>
  <changelog author="dheidler@suse.de" date="1478088000">- Switch to libmesode insted of libstrophe
  * This allows better SSL cert validation</changelog>
  <changelog author="jengelh@inai.de" date="1478433600">- Orthographic fixes.
- Remove useless BuildRequire on shlib package.</changelog>
  <changelog author="mvetter@suse.com" date="1486641600">- Update to 0.5.1:
  * Add prof.get_room_nick plugins api function
  * Add main.help.header theme option
  * Look for system TLS certificate path by default (/tls certpath)
  * Use service discovery to set account muc property
  * Allow clearing account muc and resource properties
  * Allow plugins to complete file paths with prof.filepath_completer_add function
  * Add encryption settings functions to plugins api
  * Allow plugins to block message sending on pre message send hooks
  * Bug fixes: https://github.com/boothj5/profanity/milestone/15?closed=1</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls/openssl from buildrequires</changelog>
  <changelog author="mvetter@suse.com" date="1521201600">- Compile profanity-mini with --disable-icons:
  Since we first do the standard build we need to disable the
  icons in the later build to really get rid of the GTK dependency</changelog>
  <changelog author="dheidler@suse.com" date="1521547200">- Enable C and Python plugin API</changelog>
  <changelog author="mvetter@suse.com" date="1548244800">- Update to 0.6.0 RC1:
  * Allow moving vertical window positions (/titlebar, /mainwin, /statusbar, /inputwin)
  * Allow loading/unloading all plugins (/plugins)
  * Allow installing plugins from directory (/plugins)
  * Allow uninstallation of plugins (/plugins uninstall)
  * Allow update of plugins (/plugins update)
  * Theme option for status bar time (statusbar.time)
  * Case/accent insensitive autocompletion
  * Shift tab to select previous autocomplete suggestion
  * Allow searching help (/help search_all|search_any)
  * Support for Legacy SSL
  * Allow caching of rooms (/rooms cache)
  * Add autocompletion for servername when listing rooms (/rooms service)
  * Allow showing/disabling tab number in statusbar (/statusbar show)
  * Adjust configure for OpenBSD
  * Use UUIDs instead of counter for messages
  * Support basic ad-hoc commands(xep-0050) (/command)
  * Add option to trust server's certificate (/connect, /account)
  * Add possibility to close windows via prof_win_close inputrc hook
  * Bug fixes: https://github.com/boothj5/profanity/milestone/16?closed=1</changelog>
  <changelog author="mvetter@suse.com" date="1550491200">- Update to 0.6.0:
  * No changes since RC1</changelog>
  <changelog author="mvetter@suse.com" date="1564574400">- Update to 0.7.0:
  * Fix plugin unload return code if just one plugin fails (#995)
  * Fix several typos
  * Fix some display indentation issues (#1073)
  * Fail plugin unload if the plugin doesnt exist
  * Improve encrypted message stub header by mentioning the encryption method
  * Fix GPG encryption (#997)
  * Redraw sceen after entry of PGP key (#906)
  * Fix support for case-sensitive account names (#725)
  * Fix /me display when highlighting user in MUCs (#950)
  * Fix `make dist` (0f0659a)
  * Fix use after free bug (#1044)
  * Fix segfault on connect with default account (#1046)
  * Implement OMEMO support (#1039, #658, #1070)
  * Add random string at the end of the default resource (#1053)
  * Fix handling of messages without ID in MUC (#1061)
  * Add library versioning to libprofanity (#973)
  * Add more customization: occupants indent (/occupants) (#690, #1072)
  * Add more customization: occupants header char (/occupants) (#690, #1074)
  * Add more customization: occupants wrap (/occupants) (#690, 125ca2f)
  * Add more customization: occupants char (/occupants) (#690, #1084)
  * Fix formatting for privileges on (a666f0d)
  * Fix usage of statusbar number in theme (#1078)
  * Fix Debian 32bit tests (#1091)
  * Fix unit tests (#1092)
  * Fix infinite loop on connection loss (#1103)
  * Don't clear saved account data in session_disconnect (#1106)
  * Cancel autoping timer on disconnect or connection loss (#1105)
  * Fix SIGABRT on connection loss (#1083)
  * Only print room history for new messages upon reconnect (#704, #1110)
  * Check if valid account before setting autoconnect (#1112)
  * Improve plugin load error message, in case built without support (cc697de)
  * Iterate up to 100 logfiles (#519)
  * Fix rejoining of MUCs upon reconnect (#1120)
  * Add option to set all window related time formats (#632, #1120)
  * Always check for directory changes with sendfile auto completion (#1154)
  * Fix several memory leaks (#1130, + plenty commits)
  * For details see https://github.com/profanity-im/profanity/milestone/17</changelog>
  <changelog author="mvetter@suse.com" date="1564574401">- Build both mini and standard with OMEMO enabled</changelog>
  <changelog author="mvetter@suse.com" date="1569326400">- Update to 0.7.1:
  * Fix copyright/info displayed email
  * Fix typos in OMEMO logs
  * Fix crash when jid has no not part (#1153, #1193)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580731200">- Update to 0.8.0:
  * OMEMO fingerprint autocompletion now considers only the contact in question (@paulfariello) (#1068)
  * Save and display oldest timestamp from delay tags (#1254)
  * Change theme handling (#1077)
  * /theme load themename not loads only the colours of a theme. So the users preferences don't get overwritten
  * /theme full-load themename loads the whole theme including preferences (like omemo.char)
  * Add gruvbox theme (@Misaflo) (#1259)
  * XEP-0092: Include OS name in /software answer.
  * See /os on|off
  * Add option to notify about version request via XEP-0092 and XEP-0232 via adv.notify.discoversion
  * setting in configuration file.
  * Add option to display MUC name or JID in titlebar: /titlebar use [name|jid].
  * Add /roster room use command to decide whether to display the MUC name or JID in the roster:
    /roster room use name to use the name of the MUC in the roster list.
    /roster room use jid to use the jid of the MUC in the roster list.
  * Fix decryption failure for messages sent from Converse.js (@paulfariello) (#1253)
  * Fix crash when OMEMO key is misconfigured (@paulfariello) (#1239)
  * Use OMEMO for offline MUC members (@paulfariello) (#1242)
  * Fix OMEMO 1on1 chats with psi+ (@svensp) (#1247)
  * Save occupants and roster chars (#1244)
  * Add support for downloading user avatars via XEP-0084 (#1240)
  * See /avatar
  * Add last read position marker trackbar (#1238)
  * Dont print error message if a valid setting function is called (#1237)
  * When printing configuration we often use the same command as setting but without any argument.
  * So far ths displayed "Invalid usage".
  * Add support for XEP-0392 consistent color generation for nicks (@aaptel and @jubalh) (#1191)
  * See /color, /occupants color, /roster color
  * Call ncurses resize function before move function (#1235)
  * Fix error when joining IRC via biboumi (#1230)
  * Fix stanza_get_child_by_name_and_from() strcmp (#1227)
  * Fix showing own messages twice in ejabberd mucs (#1223)
  * Allow setting of status message (which actually never worked before) (b846c49)
  * /status set online "This is my text"
  * /status set away bye
  * /status set away
  * Add option to store current line in history (irssi down arrow) (#200)
  * Standardize commands (#1116):
    /tls show on|of -&gt; /titlebar show|hide tls`
    /encwarn on|off -&gt; /titlebar show|hide encwarn
    /titlebar show|hide resource additionally to /resource titlebar on
    /titlebar show|hide presence additionally to /presence titlebar on
    /invite &lt;contact&gt; -&gt; `/invite send
    /invites -&gt; /invite list
    /decline -&gt; /invite decline
    /online, /away, /dnd, /chat, /xa -&gt; /status set online etc.
    /status -&gt; /status get
    /chlog on -&gt; /logging chat on (#1224)
    /grlog on -&gt; /logging group on (#1224)
    /group -&gt; /roster group (#1229)
  * Check omemo stanza names when iterating nodes (@aszlig) (#1217)
  * Add clipboard feature. See /paste (#1216)
  * Log MUC PM messages (#1214)
  * Improve forest theme
  * Change default text colors to default instead of white (@mdosch) (#1213) (#535)
  * Fix date display in chat history (#992)
  * Log incoming MUC messages if origin-id sais they dont come from us (#1201)
  * Support XEP-0359: Unique and Stable Stanza IDs (#1207)
  * To help us identify which MUC messages were sent by us.
  * Fix double _XOPEN_SOURCE definition (@pasis) (#1206)
  * Highlight unread messages with a different color in /wins (#895)
  * New theming option cmd.wins.unread
  * Improve MUC 1:1 logging (#1184)
  * Fix user messages double logged in MUC logs (#1201)
  * Fix 26 causes for memory leaks
  * Add /clear autocompletion and improve help (#855)
  * Allow multiple instances to write to account config via /reload
  * command that reloads the config file (#627)
  * Log message carbons to log file (#1181)
  * Include PYTHON_EXTRA_LIBS in libtool config (@mzagozen) (#1200)
  * Document how to block users in MUCS (#618)
  * Keyboard switch to select the next window with unread messages (#1114) (alt + a)
  * Keyboard switches (for moving to 20 windows instead of 10 (#1114) (alt + 1234567890qwertyuio)
  * Fix MUC history detection with older Prosody versions (#1190) See https://issues.prosody.im/1416
  * statusbar.current is a new theming option for currently selected tab (@quite) (#1195)
  * Code cleanup
  * Make /info more user friendly (#1194)
  * Add solarized theme (#1175, #1198, #1199) (@mdosch)
  * Set nonblocking mode for stderr (@pasis) (#1192)
  * Log alleged roster push (6cf06dc)
  * Allow colorization of history messages (#1170)
  * See main.text.history theming option
  * Fix crash if source jid doesn't contain the node part (@pasis) (#1153)
  * Add support for 256 colors (@aaptel and @jubalh) (#1177 and many commits)
  * We use the Xterm color names. See https://jonasjacek.github.io/colors
  * Don't render (all) delayed messages as MUC history (@weiss) (#1173)
  * Add possibility to specify alternative config file (10ca3e)
  * Use profanity -c ~/path/to/other/config
  * Don't print subscribed message if contact is already in roster (#1166)
  * Only save preferences when new /save command is issued (#1146)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581076800">- Update to 0.8.1:
  * Fix ending ncurses colors in rosterwin
  * Fix segfault when consistent nick colors where never in config (#1236)
  * Improve /clear behaviour to also clear the buffer. So a redraw doesn't bring
  * the content back.
  * Use unique IDs in stanzas when requesting avatars</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591617600">- Add -fcommon to fix build with gcc10 (boo#1160244)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591704000">- Update to 0.9.0:
  * Support for XEP-0308: Last Message Correction (#805)
    See `/correction` and `/correct`.
  * Code cleanup of UI and Message functions
  * Always send delivery receipts if they are enabled (#1268)
  * By default don't allow sending unencrypted files in an encrypted chat session (#1270) (@moppman and @jubalh)
    See `/omemo|otr|pgp sendfile`.
  * Add CI for OpenBSD via sr.ht (@wstrm)
  * OMEMO: switch to 12 byte IV for sending (#1272)
  * Allow UTF-8 symbols as OMEMO/OTR/PGP indicator char (#1264)
  * Make color of the trackbar configurable
    Use `main.trackbar` in themes.
  * Allow setting custom log file
    `profanity -f TEST` will log to `~/.local/share/profanity/logs/TEST.log`.
  * Send proper OS names for OpenBSD and NetBSD if `/os` is enabled
  * Fix plenty memory leaks (@pasis and @jubalh)
  * XEP-0084: Add option to open avatars directly (#1281)
    `/avatar odin@valhalla.org` became `/avatar get odin@valhalla.org`
    New is:
    `/executable avatar feh`
    `/avatar open odin@valhalla.org`
    xdg-open is used by default. So it will take your default application.
  * Enable popular features by default.
    For a nicer out of the box experience we enable:
  - allow message correction
  - sending receipts
  - enabling carbons
  - type/chat states
  * Add slashguard feature to prevent sending commands with typos
    Should protect against `q/uit` or ` /quit`.
    See `/slashguard`.
  * Optionally display both MUC name and MUC JID in titlebar (#1284)
    `/titlebar use name|jid` -&gt; `/titlebar show|hide name|jid`.
  * Add option to define a theme at startup (#1286)
    `/profanity -t bios`
  * Add setting to not colorize own nick if XEP-0392 is enabled (#1288)
    `/color own on|off`.
  * Add new theme: jubalian
  * Fix docker related CI tests (#1294)
  * Fix OMEMO autocompletion (75a43f, df23c3)
  * Modify our README
  * Store logs in SQLite backend (#1282)
  * Request OMEMO device list only for non anon MUCs (#1315) (@DebXWoody)
  * Don't display MUC history in one uniform colour, instead colour messages like regular ones (#1261)
  * Fix autocompletion for `/software` in regular chat windows (#1337)
  * XEP-0092: Make it possible to ask servers for their version (#1338)
  * Add possibility to easily open URLs (#1340, #1348)
    `/executable urlopen firefox`
    `/urlopen &lt;tab&gt;`
  * Display hint when window is scrolled (#1289)
    Theme via `titlebar.scrolled`
  * Add option to hide windows with no new messages in statusbar (#1285)
    `/statusbar show|hide read`
  * Support bookmark names (#697)
  * Preserve Gajims minimize flag in bookmarks (#1326)
  * Don't show resource in titlebar in narrow windows if it is too long (#715)
  * Improve autoping (#1333, #1315) (@DebXWoody)
  * Fix titlebar status display when using PGP (#1327) (@DebXWoody)
  * OMEMO: Only request "current" item (#1329) (@DebXWoody)
  * Add feature to ignore the autojoin flag for bookmarks (#1115)
    Helps users who want to autojoin MUCs with most clients but not with all.
    `/bookmark ignore`
  * Fix edge case where contacts get displayed as offline when they are online (3d7a31)
  * Add option for legacy authentication (#1236) (@pasis)
    `/connect &lt;account&gt; [auth default|legacy]`
    `/account &lt;account&gt; set auth default|legacy`
  * All issues: https://github.com/profanity-im/profanity/milestone/19</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591876800">- Update to 0.9.1:
  * Make legacy auth optional (#1360) (@pasis)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592049600">- Update to 0.9.2:
  * Dont manipulate pointer from getenv (#1357)
  * Fix reading/writing linked files (#1362)
  * Use gnu99 C standard (#1357)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592568000">- Update to 0.9.3:
  * Fix expansion in eval_password (#1364)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Update to 0.9.4:
  * Fix NULL terminated list (#1367)
  * Add missing string.h (#1372)
  * Fix gcc warnings for cygwin (#1373)</changelog>
</package>
<package pkgid="dd4710c8fc96a8925e07a51a6d22929f73175bf1e2243c70915d246761239d5a" name="python-M2Crypto" arch="src">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="69729c424a4ddd62a3902977986dd1cf323b0293af84ae9a1d4f273c02a786f3" name="python-M2Crypto-doc" arch="noarch">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="412f9025635c31c3959db7b2d8b4fe54e88cb0a414b9782bbdb710711b808e0d" name="python-paramiko" arch="src">
  <version epoch="0" ver="2.4.2" rel="lp152.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1467979200">- fix build</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- updated homepage URL
- update to 2.0.1:
  * [Bug] #537: Fix a bug in BufferedPipe.set_event which could cause
    deadlocks/hangs when one uses select.select against Channel objects (or
    otherwise calls Channel.fileno after the channel has closed).
  * [Bug] #520: (Partial fix) Fix at least one instance of race condition
    driven threading hangs at end of the Python interpreter session.
    (Includes a docs update as well - always make sure to .close() your
    clients!)</changelog>
  <changelog author="michael@stroeder.com" date="1469966400">- update to 2.0.2
  * [Bug] #758: Apply type definitions to _winapi module from
    jaraco.windows 3.6.1. This should address issues on Windows platforms
    that often result in errors like ArgumentError: [...] int too long to
    convert. Thanks to @swohlerLL for the report and Jason R. Coombs for the
    patch.
  * [Bug] #774: Add a _closed private attribute to Channel objects so that
    they continue functioning when used as proxy sockets under Python 3 (e.g.
    as direct-tcpip gateways for other Paramiko connections.)
  * [Bug] #673: (via #681) Fix protocol banner read errors (SSHException)
    which would occasionally pop up when using ProxyCommand gatewaying.
    Thanks to @Depado for the initial report and Paul Kapp for the fix.</changelog>
  <changelog author="tbechtold@suse.com" date="1475841600">- Fix Requires for python-cryptography
- Add missing Requires for python-pyasn1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481630400">- update to 2.1.1
  * A tweak to the original patch implementing gh#398 was not fully applied,
    causing calls to ~paramiko.client.SSHClient.invoke_shell to fail with
    AttributeError. This has been fixed.
  * Fix the implementation of PKey.write_private_key_file (this method is only
    publicly defined on subclasses; the fix was in the private real
    implementation) so it passes the correct params to open()
  * Add an optional timeout parameter to Transport.start_clienti
    &lt;paramiko.transport.Transport.start_client&gt; (and feed it the value of the
    configured connection timeout when used within SSHClient
    &lt;paramiko.client.SSHClient&gt;.)
  * Catch AssertionError thrown by Cryptography when attempting to load bad
    ECDSA keys, turning it into an SSHException.
  * Add a missing .closed attribute (plus ._closed because reasons) to
    ProxyCommand &lt;paramiko.proxy.ProxyCommand&gt;
  * Make the subprocess import in proxy.py lazy so users on platforms without
    it (such as Google App Engine) can import Paramiko successfully
  * Fix incorrect docstring/param-list for Transport.auth_gssapi_keyex
    &lt;paramiko.transport.Transport.auth_gssapi_keyex&gt; so it matches
    the real signature.
  * Add an environment dict argument to Client.exec_command</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.1.2
  * Fix a bug in server-mode concerning multiple interactive auth steps
  * SSHClient now gives its internal Transport a handle on itself, preventing
    garbage collection of the client until the session is closed. Without this,
    some code which returns stream or transport objects without the client that
    generated them, would result in premature session closure
    when the client was GCd
  * Avoid test suite exceptions on platforms lacking errno.ETIME
  * weak how RSAKey.__str__ behaves so it doesn?t cause TypeError under Python 3.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Add python-pyasn1 as Buildrequires for testing</changelog>
  <changelog author="rjschwei@suse.com" date="1489752000">- Fix version setting for cryptography for build</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497182400">- update to 2.1.3
  * Make util.log_to_file append instead of replace.
  * SSHClient and Transport could cause a memory leak if there?s a connection
  problem or protocol error, even if Transport.close() is called.
  * Prior support for ecdsa-sha2-nistp(384|521) algorithms didn?t fully extend
  to covering host keys, preventing connection to hosts which only offer
  these key types and no others. This is now fixed.
  * Prefer newer ecdsa-sha2-nistp keys over RSA and DSA keys during host key
  selection. This improves compatibility with OpenSSH, both in terms of general
  behavior, and also re: ability to properly leverage OpenSSH-modified
  known_hosts files.
  * The RC4/arcfour family of ciphers has been broken since version 2.0; but since
  the algorithm is now known to be completely insecure, we are opting
  to remove support outright instead of fixing it.
  * Move sha1 above the now-arguably-broken md5 in the list of preferred MAC
  algorithms, as an incremental security improvement for users whose target
  systems offer both.
  * Writing encrypted/password-protected private key files was silently broken
  since 2.0 due to an incorrect API call
    Includes a directly related fix, namely adding the ability to read AES-256-CBC
  ciphered private keys (which is now what we tend to write out as it is
  Cryptography?s default private key cipher.)
  * Allow any type implementing the buffer API to be used with BufferedFile,
  Channel, and SFTPFile. This resolves a regression introduced in 1.13
  with the Python 3 porting changes, when using types such as memoryview.
  * Enhance default cipher preference order such that aes(192|256)-cbc are preferred
  over blowfish-cbc.
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
  and does not consider a different type to be a ?Missing? host key. This fixes
  a common case where an ECDSA key is in known_hosts and the server also has
  an RSA host key.
  * Overhaul the codebase to be PEP-8</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to 2.2.1:
  * Missed a spot
  * Update .travis.yml
  * Whitespace
  * Having this in a mini-toctree made the nav look funny and is also just unintuitive
  * Changelog re #471, re #65
  * these are bytes
  * changelog: update for #990 and #993
  * ecdh kex support
  * flake8/whitespace
  * Trailing comma
  * Add test for posix-rename@openssh.com extension for SFTP client
  * Changelog re #921
  * Add a note about new Python-level deps to changelog re: Ed25519 support
  * Add method for "posix-rename@openssh.com" extension for SFTP client.
  * Add IOError in posix-rename@openssh.com test for python 2 support.
  * this isnt bytes
  * Added a auth_timeout to handle situations where SSH server stops responding during auth.
  * small cleanups
  * More changelog flimflammery
  * Added changelog entry
  * python 3 compatibility
  * Incorrect comparison, should be &lt;=
  * DDD re #857
  * Improve __hash__ functions
  * Hrm that should always have been an h1
  * No idea how this got past all the earlier flake8 work...
  * comments
  * Fixed test to support python 2.6
  * Note ecdh-sha2 preferred-kex placement in changelog entry for #951, re #983
  * Changelog language tweaks
  * Reorder cipher and key preferences to make more sense
  * Added a test to check that the auth_timeout argument is passed through and applied.
  * Changelog tweak
  * Cut 2.2.1
  * transport: change order of preferred kex and hmac algorithms
  * need bcrypt &gt;= 3.1.3 for kdf() ignore_few_rounds kwarg
  * Changelog re #972, re #325, closes #325
  * cleanup/simplify auth_timeout tests
  * Missed a merge conflict lolol
  * flake8
  * Changelog re #951
  * Perplexed at why flake8 did not report this earlier
  * Add Python 3.6 to classifiers
  * Add support for posix-rename@openssh.com for the SFTP server side and fix tests accordingly.
  * sphinx nitpick fixes
  * Fixed encoding/decoding of the public key on the wire
  * Added test for authentication timeout from a non-responsive server
  * refactor files
  * fixed comment + consistency
  * Changelog re #857
  * Cut 2.2.0
  * integration test, with ourselves
  * TODO
  * That was easy. Closes #857
  * Add sanity note to changelog re #869
  * Unit tests
  * Fixes #325 -- add support for Ed25519 keys
  * Happy New Year
  * implement __hash__() method for Ed25519Key
  * pep8
  * Increased auth_timeout to 30 seconds
  * py3k
  * fixed long line
  * Link to the spec
  * set a minimum version
  * Support decrypting keys
  * Failing test proving need for #857
- move demos/ to extra -doc package</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- update to 2.2.2:
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
    and does not consider a different type to be a ?Missing? host key.
    This fixes a common case where an ECDSA key is in known_hosts and the server
    also has an RSA host key.
  * Fix up host-key checking in our GSSAPI support, which was previously
    using an incorrect API call
  * Fix key exchange (kex) algorithm list for GSSAPI authentication;
    reviously, the list used solely out-of-date algorithms, and now contains
    newer ones listed preferentially before the old
  * Clean up GSSAPI authentication procedures so they do not prevent normal
    fallback to other authentication methods on failure.
  * Add rekeying support to GSSAPI connections, which was erroneously missing.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204801">- update to 2.3.1
  + cert_support.tar.gz - missing test certificates for testsuite
  * Certificate support broke the no-certificate case for Ed25519 keys
    (symptom is an AttributeError about public_blob.) This went uncaught
    due to cert autoload behavior (i.e. our test suite never actually ran
    the no-cert case, because the cert existed!) Both issues have been fixed.
  * Implement basic client-side certificate authentication
    (as per the OpenSSH vendor extension.)
  * Added pre-authentication banner support for the server interface
    (ServerInterface.get_banner plus related support in Transport/AuthHandler.)
  * Update Ed25519Key so its constructor offers the same file_obj parameter
    as its sibling key classes.
  * Add a gss_trust_dns option to Client and Transport to allow explicitly
    setting whether or not DNS canonicalization should occur when using GSSAPI.
  * Paramiko originally defaulted to zlib compression level 9
    (when one connects with compression=True; it defaults to off.) This has been
    found to be quite wasteful and tends to cause much longer transfers in most
    cases, than is necessar
  * Enhance documentation around the new SFTP.posix_rename method
    so it?s referenced in the ?standard? rename method for increased visibility.
  * Modify logic around explicit disconnect messages, and unknown-channel situations,
    so that they rely on centralized shutdown code instead of running their own.
    This is at worst removing some unnecessary code, and may help with some
    situations where Paramiko hangs at the end of a session.
  * Display exception type and message when logging auth-rejection messages
    (ones reading Auth rejected: unsupported or mangled public key); previously
    this error case had a bare except and did not display exactly why the key
    failed.
  * Ed25519 keys never got proper API documentation support; this has been fixed.
  * Update how we use Cryptography?s signature/verification methods
    so we aren?t relying on a deprecated API.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- update to 2.4.0
  + new pytest based testsuite
  * dd a new passphrase kwarg to SSHClient.connect so users may disambiguate
    key-decryption passphrases from password-auth passwords.
  * Drop Python 2.6 and Python 3.3 support</changelog>
  <changelog author="tbechtold@suse.com" date="1521115200">update to version 2.4.1 (bsc#1085276, CVE-2018-7750):
  * changelog: update for #1039 / #1051
  * Screen off dev version of Python from test matrix
  * ensure ed25519 password is bytes
  * Cut 2.0.8
  * Cut 2.3.2
  * Initial tests proving CVE-2018-7750 / #1175
  * Guess something else added this prior to the merge
  * Fixes CVE-2018-7750 / #1175
  * Uncaught typo in test suite
  * Initial tests proving CVE-2018-7750 / #XXX
  * Test proving #1039 / efficacy of #1051
  * Changelog closes #1175
  * Cut 2.1.5
  * Allow overriding test client connect kwargs in Transport test suite
  * Cut 2.4.1
  * Fixes CVE-2018-7750 / #XXX
  * Cut 2.2.3
  * flake8</changelog>
  <changelog author="ro@suse.de" date="1521115201">- add paramiko-test_extend_timeout.patch (bsc#1085529)
  extend timeout in testsuite to pass on ppc64le</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1538740800">- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
  * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
    where hostile clients could trick the server into thinking they were
    authenticated without actually submitting valid authentication.
  * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
  * Updated SSHConfig.lookup &lt;paramiko.config.SSHConfig.lookup&gt; so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1542110400">- add disable-gssapi.patch - workaround for boo#1115769</changelog>
  <changelog author="Ali Abdallah &lt;ali.abdallah@suse.com&gt;" date="1585051200">- add-support-for-new-OpenSSH-private-key-format.patch:
  Add support for new OpenSSH &gt;= 7.8p1 private key format  (bsc#1166758)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1587556800">- paramiko-fix-1169489.patch: fixed fallout from last patch (bsc#1169489)</changelog>
</package>
<package pkgid="107896365567db47f4a534b16fadc66a1ba84f9559ccfe17c73a65c592e5d2e3" name="python-paramiko-doc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="lp152.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1467979200">- fix build</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- updated homepage URL
- update to 2.0.1:
  * [Bug] #537: Fix a bug in BufferedPipe.set_event which could cause
    deadlocks/hangs when one uses select.select against Channel objects (or
    otherwise calls Channel.fileno after the channel has closed).
  * [Bug] #520: (Partial fix) Fix at least one instance of race condition
    driven threading hangs at end of the Python interpreter session.
    (Includes a docs update as well - always make sure to .close() your
    clients!)</changelog>
  <changelog author="michael@stroeder.com" date="1469966400">- update to 2.0.2
  * [Bug] #758: Apply type definitions to _winapi module from
    jaraco.windows 3.6.1. This should address issues on Windows platforms
    that often result in errors like ArgumentError: [...] int too long to
    convert. Thanks to @swohlerLL for the report and Jason R. Coombs for the
    patch.
  * [Bug] #774: Add a _closed private attribute to Channel objects so that
    they continue functioning when used as proxy sockets under Python 3 (e.g.
    as direct-tcpip gateways for other Paramiko connections.)
  * [Bug] #673: (via #681) Fix protocol banner read errors (SSHException)
    which would occasionally pop up when using ProxyCommand gatewaying.
    Thanks to @Depado for the initial report and Paul Kapp for the fix.</changelog>
  <changelog author="tbechtold@suse.com" date="1475841600">- Fix Requires for python-cryptography
- Add missing Requires for python-pyasn1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481630400">- update to 2.1.1
  * A tweak to the original patch implementing gh#398 was not fully applied,
    causing calls to ~paramiko.client.SSHClient.invoke_shell to fail with
    AttributeError. This has been fixed.
  * Fix the implementation of PKey.write_private_key_file (this method is only
    publicly defined on subclasses; the fix was in the private real
    implementation) so it passes the correct params to open()
  * Add an optional timeout parameter to Transport.start_clienti
    &lt;paramiko.transport.Transport.start_client&gt; (and feed it the value of the
    configured connection timeout when used within SSHClient
    &lt;paramiko.client.SSHClient&gt;.)
  * Catch AssertionError thrown by Cryptography when attempting to load bad
    ECDSA keys, turning it into an SSHException.
  * Add a missing .closed attribute (plus ._closed because reasons) to
    ProxyCommand &lt;paramiko.proxy.ProxyCommand&gt;
  * Make the subprocess import in proxy.py lazy so users on platforms without
    it (such as Google App Engine) can import Paramiko successfully
  * Fix incorrect docstring/param-list for Transport.auth_gssapi_keyex
    &lt;paramiko.transport.Transport.auth_gssapi_keyex&gt; so it matches
    the real signature.
  * Add an environment dict argument to Client.exec_command</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.1.2
  * Fix a bug in server-mode concerning multiple interactive auth steps
  * SSHClient now gives its internal Transport a handle on itself, preventing
    garbage collection of the client until the session is closed. Without this,
    some code which returns stream or transport objects without the client that
    generated them, would result in premature session closure
    when the client was GCd
  * Avoid test suite exceptions on platforms lacking errno.ETIME
  * weak how RSAKey.__str__ behaves so it doesn?t cause TypeError under Python 3.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Add python-pyasn1 as Buildrequires for testing</changelog>
  <changelog author="rjschwei@suse.com" date="1489752000">- Fix version setting for cryptography for build</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497182400">- update to 2.1.3
  * Make util.log_to_file append instead of replace.
  * SSHClient and Transport could cause a memory leak if there?s a connection
  problem or protocol error, even if Transport.close() is called.
  * Prior support for ecdsa-sha2-nistp(384|521) algorithms didn?t fully extend
  to covering host keys, preventing connection to hosts which only offer
  these key types and no others. This is now fixed.
  * Prefer newer ecdsa-sha2-nistp keys over RSA and DSA keys during host key
  selection. This improves compatibility with OpenSSH, both in terms of general
  behavior, and also re: ability to properly leverage OpenSSH-modified
  known_hosts files.
  * The RC4/arcfour family of ciphers has been broken since version 2.0; but since
  the algorithm is now known to be completely insecure, we are opting
  to remove support outright instead of fixing it.
  * Move sha1 above the now-arguably-broken md5 in the list of preferred MAC
  algorithms, as an incremental security improvement for users whose target
  systems offer both.
  * Writing encrypted/password-protected private key files was silently broken
  since 2.0 due to an incorrect API call
    Includes a directly related fix, namely adding the ability to read AES-256-CBC
  ciphered private keys (which is now what we tend to write out as it is
  Cryptography?s default private key cipher.)
  * Allow any type implementing the buffer API to be used with BufferedFile,
  Channel, and SFTPFile. This resolves a regression introduced in 1.13
  with the Python 3 porting changes, when using types such as memoryview.
  * Enhance default cipher preference order such that aes(192|256)-cbc are preferred
  over blowfish-cbc.
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
  and does not consider a different type to be a ?Missing? host key. This fixes
  a common case where an ECDSA key is in known_hosts and the server also has
  an RSA host key.
  * Overhaul the codebase to be PEP-8</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to 2.2.1:
  * Missed a spot
  * Update .travis.yml
  * Whitespace
  * Having this in a mini-toctree made the nav look funny and is also just unintuitive
  * Changelog re #471, re #65
  * these are bytes
  * changelog: update for #990 and #993
  * ecdh kex support
  * flake8/whitespace
  * Trailing comma
  * Add test for posix-rename@openssh.com extension for SFTP client
  * Changelog re #921
  * Add a note about new Python-level deps to changelog re: Ed25519 support
  * Add method for "posix-rename@openssh.com" extension for SFTP client.
  * Add IOError in posix-rename@openssh.com test for python 2 support.
  * this isnt bytes
  * Added a auth_timeout to handle situations where SSH server stops responding during auth.
  * small cleanups
  * More changelog flimflammery
  * Added changelog entry
  * python 3 compatibility
  * Incorrect comparison, should be &lt;=
  * DDD re #857
  * Improve __hash__ functions
  * Hrm that should always have been an h1
  * No idea how this got past all the earlier flake8 work...
  * comments
  * Fixed test to support python 2.6
  * Note ecdh-sha2 preferred-kex placement in changelog entry for #951, re #983
  * Changelog language tweaks
  * Reorder cipher and key preferences to make more sense
  * Added a test to check that the auth_timeout argument is passed through and applied.
  * Changelog tweak
  * Cut 2.2.1
  * transport: change order of preferred kex and hmac algorithms
  * need bcrypt &gt;= 3.1.3 for kdf() ignore_few_rounds kwarg
  * Changelog re #972, re #325, closes #325
  * cleanup/simplify auth_timeout tests
  * Missed a merge conflict lolol
  * flake8
  * Changelog re #951
  * Perplexed at why flake8 did not report this earlier
  * Add Python 3.6 to classifiers
  * Add support for posix-rename@openssh.com for the SFTP server side and fix tests accordingly.
  * sphinx nitpick fixes
  * Fixed encoding/decoding of the public key on the wire
  * Added test for authentication timeout from a non-responsive server
  * refactor files
  * fixed comment + consistency
  * Changelog re #857
  * Cut 2.2.0
  * integration test, with ourselves
  * TODO
  * That was easy. Closes #857
  * Add sanity note to changelog re #869
  * Unit tests
  * Fixes #325 -- add support for Ed25519 keys
  * Happy New Year
  * implement __hash__() method for Ed25519Key
  * pep8
  * Increased auth_timeout to 30 seconds
  * py3k
  * fixed long line
  * Link to the spec
  * set a minimum version
  * Support decrypting keys
  * Failing test proving need for #857
- move demos/ to extra -doc package</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- update to 2.2.2:
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
    and does not consider a different type to be a ?Missing? host key.
    This fixes a common case where an ECDSA key is in known_hosts and the server
    also has an RSA host key.
  * Fix up host-key checking in our GSSAPI support, which was previously
    using an incorrect API call
  * Fix key exchange (kex) algorithm list for GSSAPI authentication;
    reviously, the list used solely out-of-date algorithms, and now contains
    newer ones listed preferentially before the old
  * Clean up GSSAPI authentication procedures so they do not prevent normal
    fallback to other authentication methods on failure.
  * Add rekeying support to GSSAPI connections, which was erroneously missing.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204801">- update to 2.3.1
  + cert_support.tar.gz - missing test certificates for testsuite
  * Certificate support broke the no-certificate case for Ed25519 keys
    (symptom is an AttributeError about public_blob.) This went uncaught
    due to cert autoload behavior (i.e. our test suite never actually ran
    the no-cert case, because the cert existed!) Both issues have been fixed.
  * Implement basic client-side certificate authentication
    (as per the OpenSSH vendor extension.)
  * Added pre-authentication banner support for the server interface
    (ServerInterface.get_banner plus related support in Transport/AuthHandler.)
  * Update Ed25519Key so its constructor offers the same file_obj parameter
    as its sibling key classes.
  * Add a gss_trust_dns option to Client and Transport to allow explicitly
    setting whether or not DNS canonicalization should occur when using GSSAPI.
  * Paramiko originally defaulted to zlib compression level 9
    (when one connects with compression=True; it defaults to off.) This has been
    found to be quite wasteful and tends to cause much longer transfers in most
    cases, than is necessar
  * Enhance documentation around the new SFTP.posix_rename method
    so it?s referenced in the ?standard? rename method for increased visibility.
  * Modify logic around explicit disconnect messages, and unknown-channel situations,
    so that they rely on centralized shutdown code instead of running their own.
    This is at worst removing some unnecessary code, and may help with some
    situations where Paramiko hangs at the end of a session.
  * Display exception type and message when logging auth-rejection messages
    (ones reading Auth rejected: unsupported or mangled public key); previously
    this error case had a bare except and did not display exactly why the key
    failed.
  * Ed25519 keys never got proper API documentation support; this has been fixed.
  * Update how we use Cryptography?s signature/verification methods
    so we aren?t relying on a deprecated API.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- update to 2.4.0
  + new pytest based testsuite
  * dd a new passphrase kwarg to SSHClient.connect so users may disambiguate
    key-decryption passphrases from password-auth passwords.
  * Drop Python 2.6 and Python 3.3 support</changelog>
  <changelog author="tbechtold@suse.com" date="1521115200">update to version 2.4.1 (bsc#1085276, CVE-2018-7750):
  * changelog: update for #1039 / #1051
  * Screen off dev version of Python from test matrix
  * ensure ed25519 password is bytes
  * Cut 2.0.8
  * Cut 2.3.2
  * Initial tests proving CVE-2018-7750 / #1175
  * Guess something else added this prior to the merge
  * Fixes CVE-2018-7750 / #1175
  * Uncaught typo in test suite
  * Initial tests proving CVE-2018-7750 / #XXX
  * Test proving #1039 / efficacy of #1051
  * Changelog closes #1175
  * Cut 2.1.5
  * Allow overriding test client connect kwargs in Transport test suite
  * Cut 2.4.1
  * Fixes CVE-2018-7750 / #XXX
  * Cut 2.2.3
  * flake8</changelog>
  <changelog author="ro@suse.de" date="1521115201">- add paramiko-test_extend_timeout.patch (bsc#1085529)
  extend timeout in testsuite to pass on ppc64le</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1538740800">- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
  * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
    where hostile clients could trick the server into thinking they were
    authenticated without actually submitting valid authentication.
  * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
  * Updated SSHConfig.lookup &lt;paramiko.config.SSHConfig.lookup&gt; so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1542110400">- add disable-gssapi.patch - workaround for boo#1115769</changelog>
  <changelog author="Ali Abdallah &lt;ali.abdallah@suse.com&gt;" date="1585051200">- add-support-for-new-OpenSSH-private-key-format.patch:
  Add support for new OpenSSH &gt;= 7.8p1 private key format  (bsc#1166758)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1587556800">- paramiko-fix-1169489.patch: fixed fallout from last patch (bsc#1169489)</changelog>
</package>
<package pkgid="187f72b35e89826c3a378f8e68bce102090eb1e66adcbccfaf6552caaeb654d3" name="python-pyroute2" arch="src">
  <version epoch="0" ver="0.5.10" rel="lp152.4.3.1"/>
  <changelog author="glin@suse.com" date="1449835200">- Update to 0.3.15</changelog>
  <changelog author="michael@stroeder.com" date="1462708800">- Update to 0.4.0</changelog>
  <changelog author="glin@suse.com" date="1470657600">- Update to 0.4.5
  + ifinfmsg: GTP interfaces support
  + generic: devlink protocol support
  + generic: code cleanup
  + iproute: #262 -- `get_vlans()` fix
  + iproute: default mask 32 for IPv4 in `addr()`
  + rtmsg: #260 -- RTA_FLOW support
  + ipdb: #259 -- critical `Interface` class fix
  + benchmark: initial release
  + ipdb: event modules
  + ipdb: on-demand views
  + ipdb: rules management
  + ipdb: bridge controls
  + ipdb: #258 -- important Python compatibility fixes
  + netns: #257 -- pipe leak fix
  + netlink: support pickling for nlmsg
  + netlink: no buffer copying in the parser
  + netlink: parse NLA on demand
  + ipdb: #244 -- lwtunnel multipath fixes
  + iproute: #235 -- route types
  + docs updated</changelog>
  <changelog author="glin@suse.com" date="1470657601">- Update Source url to pass the check in openSUSE:Factory</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.6:
  * ipdb: #278 -- fix initial ports mapping
  * ipset: #277 -- fix ADT attributes parsing
  * nl80211: #274, #275, #276 -- BSS-related fixes</changelog>
  <changelog author="glin@suse.com" date="1479729600">- Update to 0.4.11
  + rtnl: #284 -- support vlan_flags
  + ipdb: #288 -- do not inore link-local addresses
  + ipdb: #300 -- sort ip addresses
  + ipdb: #306 -- support net_ns_pid
  + ipdb: #307 -- fix IPv6 routes management
  + ipdb: #311 -- vlan interfaces address loading
  + iprsocket: #305 -- support NETLINK_LISTEN_ALL_NSID
  + devlink: fix fd leak on broken init
  + sock_diag: initial NETLINK_SOCK_DIAG support
  + rtnl: fix critical fd leak in the compat code
  + rtnl: compat proxying fix
  + rtnl: compat code is back
  + netns: custom netns path support
  + ipset: multiple improvements</changelog>
  <changelog author="dmueller@suse.com" date="1484049600">- update to 0.4.12:
  * ipdb: #314 -- let users choose RTNL groups IPDB listens to
  * ipdb: #321 -- isolate `net_ns_.*` setup in a separate code block
  * ipdb: #322 -- IPv6 updates on interfaces in DOWN state
  * ifinfmsg: allow absolute/relative paths in the net_ns_fd NLA
  * ipset: #323 -- support setting counters on ipset add
  * ipset: `headers()` command
  * ipset: revisions
  * ipset: #326 -- mark types</changelog>
  <changelog author="dmueller@suse.com" date="1497355200">- update to 0.4.15:
  * req: #365 -- full and short nla notation fixed, critical
  * iproute: #364 -- new method, `brport()`
  * ipdb: -- support bridge port options
  * event: new genl protocols set: VFS_DQUOT, acpi_event, thermal_event
  * ipdb: #310 -- fixed priority change on routes
  * ipdb: #349 -- fix setting ifalias on interfaces
  * ipdb: #353 -- mitigate kernel oops during bridge creation
  * ipdb: #354 -- allow to explicitly choose plugins to load
  * ipdb: #359 -- provide read-only context managers
  * rtnl: #336 -- vlan flags support
  * rtnl: #352 -- support interface type plugins
  * tc: #344 -- mirred action
  * tc: #346 -- connmark action
  * netlink: #358 -- memory optimization
  * config: #360 -- generic asyncio config
  * iproute: #362 -- allow to change or replace a qdisc
  * ipset: full rework of the IPSET_ATTR_DATA and IPSET_ATTR_ADT
    ACHTUNG: this commit may break API compatibility
  * ipset: hash:mac support
  * ipset: list:set support
  * ipdb: throw EEXIST when creates VLAN/VXLAN devs with same ID, but
    under different names
  * tests: #329 -- include unit tests into the bundle
  * legal: E/// logo removed</changelog>
  <changelog author="tbechtold@suse.com" date="1499688000">- update to 0.4.17:
  * req: #374 [critical] -- mode nla init
  * iproute: #378 [critical] -- fix `flush_routes()` to respect filters
  * ifinfmsg: #376 -- fix data plugins API to support pyinstaller
  * ipdb: race fixed: remove port/bridge
  * ipdb: #280 -- race fixed: port/bridge
  * ipdb: #302 -- ipaddr views: [ifname].ipaddr.ipv4, [ifname]ipaddr.ipv6
  * ipdb: #357 -- allow bridge timings to have some delta
  * ipdb: #338 -- allow to fix interface objects from failed `create()`
  * rtnl: #336 -- fix vlan flags
  * iproute: #342 -- the match method takes any callable
  * nlsocket: #367 -- increase default SO_SNDBUF
  * ifinfmsg: support tuntap on armv6l, armv7l platforms
- convert to singlespec</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- update to 0.4.18:
  * ipdb: #379 [critical] -- routes in global commits
  * ipdb: #380 -- global commit with disabled plugins
  * ipdb: #381 -- exceptions fixed
  * ipdb: #382 -- manage dependent routes during interface commits
  * ipdb: #384 -- global `review()`
  * ipdb: #385 -- global `drop()`
  * netns: #383 -- support ppc64
  * general: public API refactored (same signatures; to be documented)</changelog>
  <changelog author="tbechtold@suse.com" date="1503662401">- update to 0.4.19:
  * ipdb: global methods `review()`, `drop()`, `dump()`, `load()`
  * ipdb: support VLAN protocol (802.1q, 802.1ad)
  * ipdb: initial support for IPv6 rules
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #394 -- correctly work with route priorities
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="tbechtold@suse.com" date="1505822400">- update to 0.4.21:
  * ipdb: #416 -- workaround for the vrf_table issue
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: use tos as a route key</changelog>
  <changelog author="James Oakley &lt;jfunk@funktronics.ca&gt;" date="1542024000">- update to 0.5.3:
  * bsd: parser improvements
  * ndb: PostgreSQL support
  * ndb: transactions commit/rollback
  * ndb: dependencies rollback
  * ipdb: IPv6 routes fix
  * &lt;https://github.com/svinota/pyroute2/issues/543&gt;
  * tcmsg: ematch support
  * tcmsg: flow filter
  * tcmsg: stats2 support improvements
  * ifinfmsg: GRE i/oflags, i/okey format fixed
  * &lt;https://github.com/svinota/pyroute2/issues/531&gt;
  * cli/ss2: improvements, tests
  * nlsocket: fix work on kernels &lt; 3.2
  * &lt;https://github.com/svinota/pyroute2/issues/526&gt;
- changes from 0.5.2
  * ndb: read-only DB prototype
  * remote: support communication via stdio
  * general: fix async keyword -- Python 3.7 compatibility
  * &lt;https://github.com/svinota/pyroute2/issues/467&gt;
  * &lt;https://bugzilla.redhat.com/show_bug.cgi?id=1583800&gt;
  * iproute: support monitoring on BSD systems via PF_ROUTE
  * rtnl: support for SQL schema in message classes
  * nl80211: improvements
  * &lt;https://github.com/svinota/pyroute2/issues/512&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/514&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/515&gt;
  * netlink: support generators
- changes from 0.5.1
  * ipdb: #310 -- route keying fix
  * ipdb: #483, #484 -- callback internals change
  * ipdb: #499 -- eventloop interface
  * ipdb: #500 -- fix non-default :: routes
  * netns: #448 -- API change: setns() doesn't remove FD
  * netns: #504 -- fix resource leakage
  * bsd: initial commits
- changes from 0.5.0
  * ACHTUNG: ipdb commit logic is changed
  * ipdb: do not drop failed transactions
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #394 -- correctly work with route priorities
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: #416 -- fix VRF interfaces creation
  * ipset: multiple improvements
  * tuntap: #469 -- support s390x arch
  * nlsocket: #443 -- fix socket methods resolve order for Python2
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Update to 0.5.4:
  * iproute: basic SR-IOV support, virtual functions setup
  * ipdb: shutdown logging fixed
  * ipset: fix regression
  * netns: pushns() / popns() / dropns() calls</changelog>
  <changelog author="pgajdos@suse.com" date="1555070400">- version update to 0.5.5
  * nftables: rules expressions
  * &lt;https://github.com/svinota/pyroute2/pull/592&gt;
  * netns: ns_pids
  * &lt;https://github.com/svinota/pyroute2/pull/593&gt;
  * ndb: wait() method
  * ndb: add extra logging, log state transitions
  * ndb: nested views, e.g. `ndb.interfaces['br0'].ports
  * cli: port pyroute2-cli to use NDB instead of IPDB
  * iproute: basic Windows support (proof of concept only)
  * remote: support mitogen proxy chains, support remote netns</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559563200">- Update to 0.5.6:
  * ndb.objects.route: multipath routes
  * ndb.objects.rule: basic support
  * ndb.objects.interface: veth fixed
  * ndb.source: fix source restart
  * ndb.log: logging setup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581163200">- Update to version 0.5.7:
  * ndb.objects.netns: prototype
  * ndb: netns management
  * ndb: netns sources autoconnect (disabled by default)
  * wireguard: basic support
  * netns: fix FD leakage
  * &lt;https://github.com/svinota/pyroute2/issues/623&gt;
  * cli: Python3 fixes
  * iproute: support `route('append', ...)`
  * ipdb: fix routes cleanup on link down
  * &lt;https://github.com/svinota/pyroute2/issues/620&gt;
  * wiset: support "mark" ipset type</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1582891200">- update to 0.5.9:
  * ethtool: fix module setup
  * ethtool: initial support &lt;https://github.com/svinota/pyroute2/pull/675&gt;
  * tc: multimatch support &lt;https://github.com/svinota/pyroute2/pull/674&gt;
  * tc: meta support &lt;https://github.com/svinota/pyroute2/pull/671&gt;
  * tc: cake: add stats_app decoder &lt;https://github.com/svinota/pyroute2/pull/662&gt;
  * conntrack: filter &lt;https://github.com/svinota/pyroute2/pull/660&gt;
  * ndb.objects.interface: reload after setns
  * ndb.objects.route: create() dst syntax
  * ndb.objects.route: 'default' syntax
  * wireguard: basic testing</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1584187200">- update to 0.5.10:
  * general: don't use pkg_resources &lt;https://github.com/svinota/pyroute2/issues/677&gt;
  * iproute: fix Windows support
  * netlink: provide the target field
  * ndb: use the target field from the netlink header
  * ndb: multiple SQL fixes, transactions fixed with the PostgreSQL backend
  * ndb: multiple object cache fixes &lt;https://github.com/svinota/pyroute2/issues/683&gt;
  * ndb.schema: drop DB triggers
  * ndb.objects: fix object management within a netns &lt;https://github.com/svinota/pyroute2/issues/628&gt;
  * ndb.objects.route: support route metrics
  * ndb.objects.route: fix default route syntax</changelog>
</package>
<package pkgid="c60d741568349f7471842a8f6e739a6dc4fc2820a79c6d29b41c09500ccf324e" name="python2-M2Crypto" arch="i586">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="a1bff11292b907d8dded4f2bcda33d2f6457f28c44709bb56177f6688b9942ed" name="python2-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="4b2ad72a142027d157dc0bd15070d1b68d15b03161183dadf78ff687ced314c9" name="python2-paramiko" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="lp152.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1467979200">- fix build</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- updated homepage URL
- update to 2.0.1:
  * [Bug] #537: Fix a bug in BufferedPipe.set_event which could cause
    deadlocks/hangs when one uses select.select against Channel objects (or
    otherwise calls Channel.fileno after the channel has closed).
  * [Bug] #520: (Partial fix) Fix at least one instance of race condition
    driven threading hangs at end of the Python interpreter session.
    (Includes a docs update as well - always make sure to .close() your
    clients!)</changelog>
  <changelog author="michael@stroeder.com" date="1469966400">- update to 2.0.2
  * [Bug] #758: Apply type definitions to _winapi module from
    jaraco.windows 3.6.1. This should address issues on Windows platforms
    that often result in errors like ArgumentError: [...] int too long to
    convert. Thanks to @swohlerLL for the report and Jason R. Coombs for the
    patch.
  * [Bug] #774: Add a _closed private attribute to Channel objects so that
    they continue functioning when used as proxy sockets under Python 3 (e.g.
    as direct-tcpip gateways for other Paramiko connections.)
  * [Bug] #673: (via #681) Fix protocol banner read errors (SSHException)
    which would occasionally pop up when using ProxyCommand gatewaying.
    Thanks to @Depado for the initial report and Paul Kapp for the fix.</changelog>
  <changelog author="tbechtold@suse.com" date="1475841600">- Fix Requires for python-cryptography
- Add missing Requires for python-pyasn1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481630400">- update to 2.1.1
  * A tweak to the original patch implementing gh#398 was not fully applied,
    causing calls to ~paramiko.client.SSHClient.invoke_shell to fail with
    AttributeError. This has been fixed.
  * Fix the implementation of PKey.write_private_key_file (this method is only
    publicly defined on subclasses; the fix was in the private real
    implementation) so it passes the correct params to open()
  * Add an optional timeout parameter to Transport.start_clienti
    &lt;paramiko.transport.Transport.start_client&gt; (and feed it the value of the
    configured connection timeout when used within SSHClient
    &lt;paramiko.client.SSHClient&gt;.)
  * Catch AssertionError thrown by Cryptography when attempting to load bad
    ECDSA keys, turning it into an SSHException.
  * Add a missing .closed attribute (plus ._closed because reasons) to
    ProxyCommand &lt;paramiko.proxy.ProxyCommand&gt;
  * Make the subprocess import in proxy.py lazy so users on platforms without
    it (such as Google App Engine) can import Paramiko successfully
  * Fix incorrect docstring/param-list for Transport.auth_gssapi_keyex
    &lt;paramiko.transport.Transport.auth_gssapi_keyex&gt; so it matches
    the real signature.
  * Add an environment dict argument to Client.exec_command</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.1.2
  * Fix a bug in server-mode concerning multiple interactive auth steps
  * SSHClient now gives its internal Transport a handle on itself, preventing
    garbage collection of the client until the session is closed. Without this,
    some code which returns stream or transport objects without the client that
    generated them, would result in premature session closure
    when the client was GCd
  * Avoid test suite exceptions on platforms lacking errno.ETIME
  * weak how RSAKey.__str__ behaves so it doesn?t cause TypeError under Python 3.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Add python-pyasn1 as Buildrequires for testing</changelog>
  <changelog author="rjschwei@suse.com" date="1489752000">- Fix version setting for cryptography for build</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497182400">- update to 2.1.3
  * Make util.log_to_file append instead of replace.
  * SSHClient and Transport could cause a memory leak if there?s a connection
  problem or protocol error, even if Transport.close() is called.
  * Prior support for ecdsa-sha2-nistp(384|521) algorithms didn?t fully extend
  to covering host keys, preventing connection to hosts which only offer
  these key types and no others. This is now fixed.
  * Prefer newer ecdsa-sha2-nistp keys over RSA and DSA keys during host key
  selection. This improves compatibility with OpenSSH, both in terms of general
  behavior, and also re: ability to properly leverage OpenSSH-modified
  known_hosts files.
  * The RC4/arcfour family of ciphers has been broken since version 2.0; but since
  the algorithm is now known to be completely insecure, we are opting
  to remove support outright instead of fixing it.
  * Move sha1 above the now-arguably-broken md5 in the list of preferred MAC
  algorithms, as an incremental security improvement for users whose target
  systems offer both.
  * Writing encrypted/password-protected private key files was silently broken
  since 2.0 due to an incorrect API call
    Includes a directly related fix, namely adding the ability to read AES-256-CBC
  ciphered private keys (which is now what we tend to write out as it is
  Cryptography?s default private key cipher.)
  * Allow any type implementing the buffer API to be used with BufferedFile,
  Channel, and SFTPFile. This resolves a regression introduced in 1.13
  with the Python 3 porting changes, when using types such as memoryview.
  * Enhance default cipher preference order such that aes(192|256)-cbc are preferred
  over blowfish-cbc.
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
  and does not consider a different type to be a ?Missing? host key. This fixes
  a common case where an ECDSA key is in known_hosts and the server also has
  an RSA host key.
  * Overhaul the codebase to be PEP-8</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to 2.2.1:
  * Missed a spot
  * Update .travis.yml
  * Whitespace
  * Having this in a mini-toctree made the nav look funny and is also just unintuitive
  * Changelog re #471, re #65
  * these are bytes
  * changelog: update for #990 and #993
  * ecdh kex support
  * flake8/whitespace
  * Trailing comma
  * Add test for posix-rename@openssh.com extension for SFTP client
  * Changelog re #921
  * Add a note about new Python-level deps to changelog re: Ed25519 support
  * Add method for "posix-rename@openssh.com" extension for SFTP client.
  * Add IOError in posix-rename@openssh.com test for python 2 support.
  * this isnt bytes
  * Added a auth_timeout to handle situations where SSH server stops responding during auth.
  * small cleanups
  * More changelog flimflammery
  * Added changelog entry
  * python 3 compatibility
  * Incorrect comparison, should be &lt;=
  * DDD re #857
  * Improve __hash__ functions
  * Hrm that should always have been an h1
  * No idea how this got past all the earlier flake8 work...
  * comments
  * Fixed test to support python 2.6
  * Note ecdh-sha2 preferred-kex placement in changelog entry for #951, re #983
  * Changelog language tweaks
  * Reorder cipher and key preferences to make more sense
  * Added a test to check that the auth_timeout argument is passed through and applied.
  * Changelog tweak
  * Cut 2.2.1
  * transport: change order of preferred kex and hmac algorithms
  * need bcrypt &gt;= 3.1.3 for kdf() ignore_few_rounds kwarg
  * Changelog re #972, re #325, closes #325
  * cleanup/simplify auth_timeout tests
  * Missed a merge conflict lolol
  * flake8
  * Changelog re #951
  * Perplexed at why flake8 did not report this earlier
  * Add Python 3.6 to classifiers
  * Add support for posix-rename@openssh.com for the SFTP server side and fix tests accordingly.
  * sphinx nitpick fixes
  * Fixed encoding/decoding of the public key on the wire
  * Added test for authentication timeout from a non-responsive server
  * refactor files
  * fixed comment + consistency
  * Changelog re #857
  * Cut 2.2.0
  * integration test, with ourselves
  * TODO
  * That was easy. Closes #857
  * Add sanity note to changelog re #869
  * Unit tests
  * Fixes #325 -- add support for Ed25519 keys
  * Happy New Year
  * implement __hash__() method for Ed25519Key
  * pep8
  * Increased auth_timeout to 30 seconds
  * py3k
  * fixed long line
  * Link to the spec
  * set a minimum version
  * Support decrypting keys
  * Failing test proving need for #857
- move demos/ to extra -doc package</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- update to 2.2.2:
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
    and does not consider a different type to be a ?Missing? host key.
    This fixes a common case where an ECDSA key is in known_hosts and the server
    also has an RSA host key.
  * Fix up host-key checking in our GSSAPI support, which was previously
    using an incorrect API call
  * Fix key exchange (kex) algorithm list for GSSAPI authentication;
    reviously, the list used solely out-of-date algorithms, and now contains
    newer ones listed preferentially before the old
  * Clean up GSSAPI authentication procedures so they do not prevent normal
    fallback to other authentication methods on failure.
  * Add rekeying support to GSSAPI connections, which was erroneously missing.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204801">- update to 2.3.1
  + cert_support.tar.gz - missing test certificates for testsuite
  * Certificate support broke the no-certificate case for Ed25519 keys
    (symptom is an AttributeError about public_blob.) This went uncaught
    due to cert autoload behavior (i.e. our test suite never actually ran
    the no-cert case, because the cert existed!) Both issues have been fixed.
  * Implement basic client-side certificate authentication
    (as per the OpenSSH vendor extension.)
  * Added pre-authentication banner support for the server interface
    (ServerInterface.get_banner plus related support in Transport/AuthHandler.)
  * Update Ed25519Key so its constructor offers the same file_obj parameter
    as its sibling key classes.
  * Add a gss_trust_dns option to Client and Transport to allow explicitly
    setting whether or not DNS canonicalization should occur when using GSSAPI.
  * Paramiko originally defaulted to zlib compression level 9
    (when one connects with compression=True; it defaults to off.) This has been
    found to be quite wasteful and tends to cause much longer transfers in most
    cases, than is necessar
  * Enhance documentation around the new SFTP.posix_rename method
    so it?s referenced in the ?standard? rename method for increased visibility.
  * Modify logic around explicit disconnect messages, and unknown-channel situations,
    so that they rely on centralized shutdown code instead of running their own.
    This is at worst removing some unnecessary code, and may help with some
    situations where Paramiko hangs at the end of a session.
  * Display exception type and message when logging auth-rejection messages
    (ones reading Auth rejected: unsupported or mangled public key); previously
    this error case had a bare except and did not display exactly why the key
    failed.
  * Ed25519 keys never got proper API documentation support; this has been fixed.
  * Update how we use Cryptography?s signature/verification methods
    so we aren?t relying on a deprecated API.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- update to 2.4.0
  + new pytest based testsuite
  * dd a new passphrase kwarg to SSHClient.connect so users may disambiguate
    key-decryption passphrases from password-auth passwords.
  * Drop Python 2.6 and Python 3.3 support</changelog>
  <changelog author="tbechtold@suse.com" date="1521115200">update to version 2.4.1 (bsc#1085276, CVE-2018-7750):
  * changelog: update for #1039 / #1051
  * Screen off dev version of Python from test matrix
  * ensure ed25519 password is bytes
  * Cut 2.0.8
  * Cut 2.3.2
  * Initial tests proving CVE-2018-7750 / #1175
  * Guess something else added this prior to the merge
  * Fixes CVE-2018-7750 / #1175
  * Uncaught typo in test suite
  * Initial tests proving CVE-2018-7750 / #XXX
  * Test proving #1039 / efficacy of #1051
  * Changelog closes #1175
  * Cut 2.1.5
  * Allow overriding test client connect kwargs in Transport test suite
  * Cut 2.4.1
  * Fixes CVE-2018-7750 / #XXX
  * Cut 2.2.3
  * flake8</changelog>
  <changelog author="ro@suse.de" date="1521115201">- add paramiko-test_extend_timeout.patch (bsc#1085529)
  extend timeout in testsuite to pass on ppc64le</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1538740800">- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
  * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
    where hostile clients could trick the server into thinking they were
    authenticated without actually submitting valid authentication.
  * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
  * Updated SSHConfig.lookup &lt;paramiko.config.SSHConfig.lookup&gt; so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1542110400">- add disable-gssapi.patch - workaround for boo#1115769</changelog>
  <changelog author="Ali Abdallah &lt;ali.abdallah@suse.com&gt;" date="1585051200">- add-support-for-new-OpenSSH-private-key-format.patch:
  Add support for new OpenSSH &gt;= 7.8p1 private key format  (bsc#1166758)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1587556800">- paramiko-fix-1169489.patch: fixed fallout from last patch (bsc#1169489)</changelog>
</package>
<package pkgid="bf5d7e738af6e9e77f850df7157e25f7a4b1b9d038bd2b7022c7ee5cbf4dfe8a" name="python2-pyroute2" arch="noarch">
  <version epoch="0" ver="0.5.10" rel="lp152.4.3.1"/>
  <changelog author="glin@suse.com" date="1449835200">- Update to 0.3.15</changelog>
  <changelog author="michael@stroeder.com" date="1462708800">- Update to 0.4.0</changelog>
  <changelog author="glin@suse.com" date="1470657600">- Update to 0.4.5
  + ifinfmsg: GTP interfaces support
  + generic: devlink protocol support
  + generic: code cleanup
  + iproute: #262 -- `get_vlans()` fix
  + iproute: default mask 32 for IPv4 in `addr()`
  + rtmsg: #260 -- RTA_FLOW support
  + ipdb: #259 -- critical `Interface` class fix
  + benchmark: initial release
  + ipdb: event modules
  + ipdb: on-demand views
  + ipdb: rules management
  + ipdb: bridge controls
  + ipdb: #258 -- important Python compatibility fixes
  + netns: #257 -- pipe leak fix
  + netlink: support pickling for nlmsg
  + netlink: no buffer copying in the parser
  + netlink: parse NLA on demand
  + ipdb: #244 -- lwtunnel multipath fixes
  + iproute: #235 -- route types
  + docs updated</changelog>
  <changelog author="glin@suse.com" date="1470657601">- Update Source url to pass the check in openSUSE:Factory</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.6:
  * ipdb: #278 -- fix initial ports mapping
  * ipset: #277 -- fix ADT attributes parsing
  * nl80211: #274, #275, #276 -- BSS-related fixes</changelog>
  <changelog author="glin@suse.com" date="1479729600">- Update to 0.4.11
  + rtnl: #284 -- support vlan_flags
  + ipdb: #288 -- do not inore link-local addresses
  + ipdb: #300 -- sort ip addresses
  + ipdb: #306 -- support net_ns_pid
  + ipdb: #307 -- fix IPv6 routes management
  + ipdb: #311 -- vlan interfaces address loading
  + iprsocket: #305 -- support NETLINK_LISTEN_ALL_NSID
  + devlink: fix fd leak on broken init
  + sock_diag: initial NETLINK_SOCK_DIAG support
  + rtnl: fix critical fd leak in the compat code
  + rtnl: compat proxying fix
  + rtnl: compat code is back
  + netns: custom netns path support
  + ipset: multiple improvements</changelog>
  <changelog author="dmueller@suse.com" date="1484049600">- update to 0.4.12:
  * ipdb: #314 -- let users choose RTNL groups IPDB listens to
  * ipdb: #321 -- isolate `net_ns_.*` setup in a separate code block
  * ipdb: #322 -- IPv6 updates on interfaces in DOWN state
  * ifinfmsg: allow absolute/relative paths in the net_ns_fd NLA
  * ipset: #323 -- support setting counters on ipset add
  * ipset: `headers()` command
  * ipset: revisions
  * ipset: #326 -- mark types</changelog>
  <changelog author="dmueller@suse.com" date="1497355200">- update to 0.4.15:
  * req: #365 -- full and short nla notation fixed, critical
  * iproute: #364 -- new method, `brport()`
  * ipdb: -- support bridge port options
  * event: new genl protocols set: VFS_DQUOT, acpi_event, thermal_event
  * ipdb: #310 -- fixed priority change on routes
  * ipdb: #349 -- fix setting ifalias on interfaces
  * ipdb: #353 -- mitigate kernel oops during bridge creation
  * ipdb: #354 -- allow to explicitly choose plugins to load
  * ipdb: #359 -- provide read-only context managers
  * rtnl: #336 -- vlan flags support
  * rtnl: #352 -- support interface type plugins
  * tc: #344 -- mirred action
  * tc: #346 -- connmark action
  * netlink: #358 -- memory optimization
  * config: #360 -- generic asyncio config
  * iproute: #362 -- allow to change or replace a qdisc
  * ipset: full rework of the IPSET_ATTR_DATA and IPSET_ATTR_ADT
    ACHTUNG: this commit may break API compatibility
  * ipset: hash:mac support
  * ipset: list:set support
  * ipdb: throw EEXIST when creates VLAN/VXLAN devs with same ID, but
    under different names
  * tests: #329 -- include unit tests into the bundle
  * legal: E/// logo removed</changelog>
  <changelog author="tbechtold@suse.com" date="1499688000">- update to 0.4.17:
  * req: #374 [critical] -- mode nla init
  * iproute: #378 [critical] -- fix `flush_routes()` to respect filters
  * ifinfmsg: #376 -- fix data plugins API to support pyinstaller
  * ipdb: race fixed: remove port/bridge
  * ipdb: #280 -- race fixed: port/bridge
  * ipdb: #302 -- ipaddr views: [ifname].ipaddr.ipv4, [ifname]ipaddr.ipv6
  * ipdb: #357 -- allow bridge timings to have some delta
  * ipdb: #338 -- allow to fix interface objects from failed `create()`
  * rtnl: #336 -- fix vlan flags
  * iproute: #342 -- the match method takes any callable
  * nlsocket: #367 -- increase default SO_SNDBUF
  * ifinfmsg: support tuntap on armv6l, armv7l platforms
- convert to singlespec</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- update to 0.4.18:
  * ipdb: #379 [critical] -- routes in global commits
  * ipdb: #380 -- global commit with disabled plugins
  * ipdb: #381 -- exceptions fixed
  * ipdb: #382 -- manage dependent routes during interface commits
  * ipdb: #384 -- global `review()`
  * ipdb: #385 -- global `drop()`
  * netns: #383 -- support ppc64
  * general: public API refactored (same signatures; to be documented)</changelog>
  <changelog author="tbechtold@suse.com" date="1503662401">- update to 0.4.19:
  * ipdb: global methods `review()`, `drop()`, `dump()`, `load()`
  * ipdb: support VLAN protocol (802.1q, 802.1ad)
  * ipdb: initial support for IPv6 rules
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #394 -- correctly work with route priorities
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="tbechtold@suse.com" date="1505822400">- update to 0.4.21:
  * ipdb: #416 -- workaround for the vrf_table issue
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: use tos as a route key</changelog>
  <changelog author="James Oakley &lt;jfunk@funktronics.ca&gt;" date="1542024000">- update to 0.5.3:
  * bsd: parser improvements
  * ndb: PostgreSQL support
  * ndb: transactions commit/rollback
  * ndb: dependencies rollback
  * ipdb: IPv6 routes fix
  * &lt;https://github.com/svinota/pyroute2/issues/543&gt;
  * tcmsg: ematch support
  * tcmsg: flow filter
  * tcmsg: stats2 support improvements
  * ifinfmsg: GRE i/oflags, i/okey format fixed
  * &lt;https://github.com/svinota/pyroute2/issues/531&gt;
  * cli/ss2: improvements, tests
  * nlsocket: fix work on kernels &lt; 3.2
  * &lt;https://github.com/svinota/pyroute2/issues/526&gt;
- changes from 0.5.2
  * ndb: read-only DB prototype
  * remote: support communication via stdio
  * general: fix async keyword -- Python 3.7 compatibility
  * &lt;https://github.com/svinota/pyroute2/issues/467&gt;
  * &lt;https://bugzilla.redhat.com/show_bug.cgi?id=1583800&gt;
  * iproute: support monitoring on BSD systems via PF_ROUTE
  * rtnl: support for SQL schema in message classes
  * nl80211: improvements
  * &lt;https://github.com/svinota/pyroute2/issues/512&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/514&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/515&gt;
  * netlink: support generators
- changes from 0.5.1
  * ipdb: #310 -- route keying fix
  * ipdb: #483, #484 -- callback internals change
  * ipdb: #499 -- eventloop interface
  * ipdb: #500 -- fix non-default :: routes
  * netns: #448 -- API change: setns() doesn't remove FD
  * netns: #504 -- fix resource leakage
  * bsd: initial commits
- changes from 0.5.0
  * ACHTUNG: ipdb commit logic is changed
  * ipdb: do not drop failed transactions
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #394 -- correctly work with route priorities
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: #416 -- fix VRF interfaces creation
  * ipset: multiple improvements
  * tuntap: #469 -- support s390x arch
  * nlsocket: #443 -- fix socket methods resolve order for Python2
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Update to 0.5.4:
  * iproute: basic SR-IOV support, virtual functions setup
  * ipdb: shutdown logging fixed
  * ipset: fix regression
  * netns: pushns() / popns() / dropns() calls</changelog>
  <changelog author="pgajdos@suse.com" date="1555070400">- version update to 0.5.5
  * nftables: rules expressions
  * &lt;https://github.com/svinota/pyroute2/pull/592&gt;
  * netns: ns_pids
  * &lt;https://github.com/svinota/pyroute2/pull/593&gt;
  * ndb: wait() method
  * ndb: add extra logging, log state transitions
  * ndb: nested views, e.g. `ndb.interfaces['br0'].ports
  * cli: port pyroute2-cli to use NDB instead of IPDB
  * iproute: basic Windows support (proof of concept only)
  * remote: support mitogen proxy chains, support remote netns</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559563200">- Update to 0.5.6:
  * ndb.objects.route: multipath routes
  * ndb.objects.rule: basic support
  * ndb.objects.interface: veth fixed
  * ndb.source: fix source restart
  * ndb.log: logging setup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581163200">- Update to version 0.5.7:
  * ndb.objects.netns: prototype
  * ndb: netns management
  * ndb: netns sources autoconnect (disabled by default)
  * wireguard: basic support
  * netns: fix FD leakage
  * &lt;https://github.com/svinota/pyroute2/issues/623&gt;
  * cli: Python3 fixes
  * iproute: support `route('append', ...)`
  * ipdb: fix routes cleanup on link down
  * &lt;https://github.com/svinota/pyroute2/issues/620&gt;
  * wiset: support "mark" ipset type</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1582891200">- update to 0.5.9:
  * ethtool: fix module setup
  * ethtool: initial support &lt;https://github.com/svinota/pyroute2/pull/675&gt;
  * tc: multimatch support &lt;https://github.com/svinota/pyroute2/pull/674&gt;
  * tc: meta support &lt;https://github.com/svinota/pyroute2/pull/671&gt;
  * tc: cake: add stats_app decoder &lt;https://github.com/svinota/pyroute2/pull/662&gt;
  * conntrack: filter &lt;https://github.com/svinota/pyroute2/pull/660&gt;
  * ndb.objects.interface: reload after setns
  * ndb.objects.route: create() dst syntax
  * ndb.objects.route: 'default' syntax
  * wireguard: basic testing</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1584187200">- update to 0.5.10:
  * general: don't use pkg_resources &lt;https://github.com/svinota/pyroute2/issues/677&gt;
  * iproute: fix Windows support
  * netlink: provide the target field
  * ndb: use the target field from the netlink header
  * ndb: multiple SQL fixes, transactions fixed with the PostgreSQL backend
  * ndb: multiple object cache fixes &lt;https://github.com/svinota/pyroute2/issues/683&gt;
  * ndb.schema: drop DB triggers
  * ndb.objects: fix object management within a netns &lt;https://github.com/svinota/pyroute2/issues/628&gt;
  * ndb.objects.route: support route metrics
  * ndb.objects.route: fix default route syntax</changelog>
</package>
<package pkgid="ebb4854584a8bb68b504f7da058aa28d2f3a56cd3d42b787447eab66efad45ca" name="python3-M2Crypto" arch="i586">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="c4bd371d68f11840a67154c9f67fa67391c707613936973a9f5d8aeb3c31e4bc" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.35.2" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="234aeab7eaaf02d88223da6d21cc56a21c4cd837c5c40d133dad28a7d89df48c" name="python3-paramiko" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="lp152.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1467979200">- fix build</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- updated homepage URL
- update to 2.0.1:
  * [Bug] #537: Fix a bug in BufferedPipe.set_event which could cause
    deadlocks/hangs when one uses select.select against Channel objects (or
    otherwise calls Channel.fileno after the channel has closed).
  * [Bug] #520: (Partial fix) Fix at least one instance of race condition
    driven threading hangs at end of the Python interpreter session.
    (Includes a docs update as well - always make sure to .close() your
    clients!)</changelog>
  <changelog author="michael@stroeder.com" date="1469966400">- update to 2.0.2
  * [Bug] #758: Apply type definitions to _winapi module from
    jaraco.windows 3.6.1. This should address issues on Windows platforms
    that often result in errors like ArgumentError: [...] int too long to
    convert. Thanks to @swohlerLL for the report and Jason R. Coombs for the
    patch.
  * [Bug] #774: Add a _closed private attribute to Channel objects so that
    they continue functioning when used as proxy sockets under Python 3 (e.g.
    as direct-tcpip gateways for other Paramiko connections.)
  * [Bug] #673: (via #681) Fix protocol banner read errors (SSHException)
    which would occasionally pop up when using ProxyCommand gatewaying.
    Thanks to @Depado for the initial report and Paul Kapp for the fix.</changelog>
  <changelog author="tbechtold@suse.com" date="1475841600">- Fix Requires for python-cryptography
- Add missing Requires for python-pyasn1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481630400">- update to 2.1.1
  * A tweak to the original patch implementing gh#398 was not fully applied,
    causing calls to ~paramiko.client.SSHClient.invoke_shell to fail with
    AttributeError. This has been fixed.
  * Fix the implementation of PKey.write_private_key_file (this method is only
    publicly defined on subclasses; the fix was in the private real
    implementation) so it passes the correct params to open()
  * Add an optional timeout parameter to Transport.start_clienti
    &lt;paramiko.transport.Transport.start_client&gt; (and feed it the value of the
    configured connection timeout when used within SSHClient
    &lt;paramiko.client.SSHClient&gt;.)
  * Catch AssertionError thrown by Cryptography when attempting to load bad
    ECDSA keys, turning it into an SSHException.
  * Add a missing .closed attribute (plus ._closed because reasons) to
    ProxyCommand &lt;paramiko.proxy.ProxyCommand&gt;
  * Make the subprocess import in proxy.py lazy so users on platforms without
    it (such as Google App Engine) can import Paramiko successfully
  * Fix incorrect docstring/param-list for Transport.auth_gssapi_keyex
    &lt;paramiko.transport.Transport.auth_gssapi_keyex&gt; so it matches
    the real signature.
  * Add an environment dict argument to Client.exec_command</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.1.2
  * Fix a bug in server-mode concerning multiple interactive auth steps
  * SSHClient now gives its internal Transport a handle on itself, preventing
    garbage collection of the client until the session is closed. Without this,
    some code which returns stream or transport objects without the client that
    generated them, would result in premature session closure
    when the client was GCd
  * Avoid test suite exceptions on platforms lacking errno.ETIME
  * weak how RSAKey.__str__ behaves so it doesn?t cause TypeError under Python 3.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Add python-pyasn1 as Buildrequires for testing</changelog>
  <changelog author="rjschwei@suse.com" date="1489752000">- Fix version setting for cryptography for build</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497182400">- update to 2.1.3
  * Make util.log_to_file append instead of replace.
  * SSHClient and Transport could cause a memory leak if there?s a connection
  problem or protocol error, even if Transport.close() is called.
  * Prior support for ecdsa-sha2-nistp(384|521) algorithms didn?t fully extend
  to covering host keys, preventing connection to hosts which only offer
  these key types and no others. This is now fixed.
  * Prefer newer ecdsa-sha2-nistp keys over RSA and DSA keys during host key
  selection. This improves compatibility with OpenSSH, both in terms of general
  behavior, and also re: ability to properly leverage OpenSSH-modified
  known_hosts files.
  * The RC4/arcfour family of ciphers has been broken since version 2.0; but since
  the algorithm is now known to be completely insecure, we are opting
  to remove support outright instead of fixing it.
  * Move sha1 above the now-arguably-broken md5 in the list of preferred MAC
  algorithms, as an incremental security improvement for users whose target
  systems offer both.
  * Writing encrypted/password-protected private key files was silently broken
  since 2.0 due to an incorrect API call
    Includes a directly related fix, namely adding the ability to read AES-256-CBC
  ciphered private keys (which is now what we tend to write out as it is
  Cryptography?s default private key cipher.)
  * Allow any type implementing the buffer API to be used with BufferedFile,
  Channel, and SFTPFile. This resolves a regression introduced in 1.13
  with the Python 3 porting changes, when using types such as memoryview.
  * Enhance default cipher preference order such that aes(192|256)-cbc are preferred
  over blowfish-cbc.
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
  and does not consider a different type to be a ?Missing? host key. This fixes
  a common case where an ECDSA key is in known_hosts and the server also has
  an RSA host key.
  * Overhaul the codebase to be PEP-8</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to 2.2.1:
  * Missed a spot
  * Update .travis.yml
  * Whitespace
  * Having this in a mini-toctree made the nav look funny and is also just unintuitive
  * Changelog re #471, re #65
  * these are bytes
  * changelog: update for #990 and #993
  * ecdh kex support
  * flake8/whitespace
  * Trailing comma
  * Add test for posix-rename@openssh.com extension for SFTP client
  * Changelog re #921
  * Add a note about new Python-level deps to changelog re: Ed25519 support
  * Add method for "posix-rename@openssh.com" extension for SFTP client.
  * Add IOError in posix-rename@openssh.com test for python 2 support.
  * this isnt bytes
  * Added a auth_timeout to handle situations where SSH server stops responding during auth.
  * small cleanups
  * More changelog flimflammery
  * Added changelog entry
  * python 3 compatibility
  * Incorrect comparison, should be &lt;=
  * DDD re #857
  * Improve __hash__ functions
  * Hrm that should always have been an h1
  * No idea how this got past all the earlier flake8 work...
  * comments
  * Fixed test to support python 2.6
  * Note ecdh-sha2 preferred-kex placement in changelog entry for #951, re #983
  * Changelog language tweaks
  * Reorder cipher and key preferences to make more sense
  * Added a test to check that the auth_timeout argument is passed through and applied.
  * Changelog tweak
  * Cut 2.2.1
  * transport: change order of preferred kex and hmac algorithms
  * need bcrypt &gt;= 3.1.3 for kdf() ignore_few_rounds kwarg
  * Changelog re #972, re #325, closes #325
  * cleanup/simplify auth_timeout tests
  * Missed a merge conflict lolol
  * flake8
  * Changelog re #951
  * Perplexed at why flake8 did not report this earlier
  * Add Python 3.6 to classifiers
  * Add support for posix-rename@openssh.com for the SFTP server side and fix tests accordingly.
  * sphinx nitpick fixes
  * Fixed encoding/decoding of the public key on the wire
  * Added test for authentication timeout from a non-responsive server
  * refactor files
  * fixed comment + consistency
  * Changelog re #857
  * Cut 2.2.0
  * integration test, with ourselves
  * TODO
  * That was easy. Closes #857
  * Add sanity note to changelog re #869
  * Unit tests
  * Fixes #325 -- add support for Ed25519 keys
  * Happy New Year
  * implement __hash__() method for Ed25519Key
  * pep8
  * Increased auth_timeout to 30 seconds
  * py3k
  * fixed long line
  * Link to the spec
  * set a minimum version
  * Support decrypting keys
  * Failing test proving need for #857
- move demos/ to extra -doc package</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- update to 2.2.2:
  * SSHClient now requests the type of host key it has (e.g. from known_hosts)
    and does not consider a different type to be a ?Missing? host key.
    This fixes a common case where an ECDSA key is in known_hosts and the server
    also has an RSA host key.
  * Fix up host-key checking in our GSSAPI support, which was previously
    using an incorrect API call
  * Fix key exchange (kex) algorithm list for GSSAPI authentication;
    reviously, the list used solely out-of-date algorithms, and now contains
    newer ones listed preferentially before the old
  * Clean up GSSAPI authentication procedures so they do not prevent normal
    fallback to other authentication methods on failure.
  * Add rekeying support to GSSAPI connections, which was erroneously missing.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204801">- update to 2.3.1
  + cert_support.tar.gz - missing test certificates for testsuite
  * Certificate support broke the no-certificate case for Ed25519 keys
    (symptom is an AttributeError about public_blob.) This went uncaught
    due to cert autoload behavior (i.e. our test suite never actually ran
    the no-cert case, because the cert existed!) Both issues have been fixed.
  * Implement basic client-side certificate authentication
    (as per the OpenSSH vendor extension.)
  * Added pre-authentication banner support for the server interface
    (ServerInterface.get_banner plus related support in Transport/AuthHandler.)
  * Update Ed25519Key so its constructor offers the same file_obj parameter
    as its sibling key classes.
  * Add a gss_trust_dns option to Client and Transport to allow explicitly
    setting whether or not DNS canonicalization should occur when using GSSAPI.
  * Paramiko originally defaulted to zlib compression level 9
    (when one connects with compression=True; it defaults to off.) This has been
    found to be quite wasteful and tends to cause much longer transfers in most
    cases, than is necessar
  * Enhance documentation around the new SFTP.posix_rename method
    so it?s referenced in the ?standard? rename method for increased visibility.
  * Modify logic around explicit disconnect messages, and unknown-channel situations,
    so that they rely on centralized shutdown code instead of running their own.
    This is at worst removing some unnecessary code, and may help with some
    situations where Paramiko hangs at the end of a session.
  * Display exception type and message when logging auth-rejection messages
    (ones reading Auth rejected: unsupported or mangled public key); previously
    this error case had a bare except and did not display exactly why the key
    failed.
  * Ed25519 keys never got proper API documentation support; this has been fixed.
  * Update how we use Cryptography?s signature/verification methods
    so we aren?t relying on a deprecated API.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- update to 2.4.0
  + new pytest based testsuite
  * dd a new passphrase kwarg to SSHClient.connect so users may disambiguate
    key-decryption passphrases from password-auth passwords.
  * Drop Python 2.6 and Python 3.3 support</changelog>
  <changelog author="tbechtold@suse.com" date="1521115200">update to version 2.4.1 (bsc#1085276, CVE-2018-7750):
  * changelog: update for #1039 / #1051
  * Screen off dev version of Python from test matrix
  * ensure ed25519 password is bytes
  * Cut 2.0.8
  * Cut 2.3.2
  * Initial tests proving CVE-2018-7750 / #1175
  * Guess something else added this prior to the merge
  * Fixes CVE-2018-7750 / #1175
  * Uncaught typo in test suite
  * Initial tests proving CVE-2018-7750 / #XXX
  * Test proving #1039 / efficacy of #1051
  * Changelog closes #1175
  * Cut 2.1.5
  * Allow overriding test client connect kwargs in Transport test suite
  * Cut 2.4.1
  * Fixes CVE-2018-7750 / #XXX
  * Cut 2.2.3
  * flake8</changelog>
  <changelog author="ro@suse.de" date="1521115201">- add paramiko-test_extend_timeout.patch (bsc#1085529)
  extend timeout in testsuite to pass on ppc64le</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1538740800">- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
  * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
    where hostile clients could trick the server into thinking they were
    authenticated without actually submitting valid authentication.
  * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
  * Updated SSHConfig.lookup &lt;paramiko.config.SSHConfig.lookup&gt; so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1542110400">- add disable-gssapi.patch - workaround for boo#1115769</changelog>
  <changelog author="Ali Abdallah &lt;ali.abdallah@suse.com&gt;" date="1585051200">- add-support-for-new-OpenSSH-private-key-format.patch:
  Add support for new OpenSSH &gt;= 7.8p1 private key format  (bsc#1166758)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1587556800">- paramiko-fix-1169489.patch: fixed fallout from last patch (bsc#1169489)</changelog>
</package>
<package pkgid="a02186d8dcb83976800dd18a8e12d48a3aa62176d1995960170502ca8149972b" name="python3-pyroute2" arch="noarch">
  <version epoch="0" ver="0.5.10" rel="lp152.4.3.1"/>
  <changelog author="glin@suse.com" date="1449835200">- Update to 0.3.15</changelog>
  <changelog author="michael@stroeder.com" date="1462708800">- Update to 0.4.0</changelog>
  <changelog author="glin@suse.com" date="1470657600">- Update to 0.4.5
  + ifinfmsg: GTP interfaces support
  + generic: devlink protocol support
  + generic: code cleanup
  + iproute: #262 -- `get_vlans()` fix
  + iproute: default mask 32 for IPv4 in `addr()`
  + rtmsg: #260 -- RTA_FLOW support
  + ipdb: #259 -- critical `Interface` class fix
  + benchmark: initial release
  + ipdb: event modules
  + ipdb: on-demand views
  + ipdb: rules management
  + ipdb: bridge controls
  + ipdb: #258 -- important Python compatibility fixes
  + netns: #257 -- pipe leak fix
  + netlink: support pickling for nlmsg
  + netlink: no buffer copying in the parser
  + netlink: parse NLA on demand
  + ipdb: #244 -- lwtunnel multipath fixes
  + iproute: #235 -- route types
  + docs updated</changelog>
  <changelog author="glin@suse.com" date="1470657601">- Update Source url to pass the check in openSUSE:Factory</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.6:
  * ipdb: #278 -- fix initial ports mapping
  * ipset: #277 -- fix ADT attributes parsing
  * nl80211: #274, #275, #276 -- BSS-related fixes</changelog>
  <changelog author="glin@suse.com" date="1479729600">- Update to 0.4.11
  + rtnl: #284 -- support vlan_flags
  + ipdb: #288 -- do not inore link-local addresses
  + ipdb: #300 -- sort ip addresses
  + ipdb: #306 -- support net_ns_pid
  + ipdb: #307 -- fix IPv6 routes management
  + ipdb: #311 -- vlan interfaces address loading
  + iprsocket: #305 -- support NETLINK_LISTEN_ALL_NSID
  + devlink: fix fd leak on broken init
  + sock_diag: initial NETLINK_SOCK_DIAG support
  + rtnl: fix critical fd leak in the compat code
  + rtnl: compat proxying fix
  + rtnl: compat code is back
  + netns: custom netns path support
  + ipset: multiple improvements</changelog>
  <changelog author="dmueller@suse.com" date="1484049600">- update to 0.4.12:
  * ipdb: #314 -- let users choose RTNL groups IPDB listens to
  * ipdb: #321 -- isolate `net_ns_.*` setup in a separate code block
  * ipdb: #322 -- IPv6 updates on interfaces in DOWN state
  * ifinfmsg: allow absolute/relative paths in the net_ns_fd NLA
  * ipset: #323 -- support setting counters on ipset add
  * ipset: `headers()` command
  * ipset: revisions
  * ipset: #326 -- mark types</changelog>
  <changelog author="dmueller@suse.com" date="1497355200">- update to 0.4.15:
  * req: #365 -- full and short nla notation fixed, critical
  * iproute: #364 -- new method, `brport()`
  * ipdb: -- support bridge port options
  * event: new genl protocols set: VFS_DQUOT, acpi_event, thermal_event
  * ipdb: #310 -- fixed priority change on routes
  * ipdb: #349 -- fix setting ifalias on interfaces
  * ipdb: #353 -- mitigate kernel oops during bridge creation
  * ipdb: #354 -- allow to explicitly choose plugins to load
  * ipdb: #359 -- provide read-only context managers
  * rtnl: #336 -- vlan flags support
  * rtnl: #352 -- support interface type plugins
  * tc: #344 -- mirred action
  * tc: #346 -- connmark action
  * netlink: #358 -- memory optimization
  * config: #360 -- generic asyncio config
  * iproute: #362 -- allow to change or replace a qdisc
  * ipset: full rework of the IPSET_ATTR_DATA and IPSET_ATTR_ADT
    ACHTUNG: this commit may break API compatibility
  * ipset: hash:mac support
  * ipset: list:set support
  * ipdb: throw EEXIST when creates VLAN/VXLAN devs with same ID, but
    under different names
  * tests: #329 -- include unit tests into the bundle
  * legal: E/// logo removed</changelog>
  <changelog author="tbechtold@suse.com" date="1499688000">- update to 0.4.17:
  * req: #374 [critical] -- mode nla init
  * iproute: #378 [critical] -- fix `flush_routes()` to respect filters
  * ifinfmsg: #376 -- fix data plugins API to support pyinstaller
  * ipdb: race fixed: remove port/bridge
  * ipdb: #280 -- race fixed: port/bridge
  * ipdb: #302 -- ipaddr views: [ifname].ipaddr.ipv4, [ifname]ipaddr.ipv6
  * ipdb: #357 -- allow bridge timings to have some delta
  * ipdb: #338 -- allow to fix interface objects from failed `create()`
  * rtnl: #336 -- fix vlan flags
  * iproute: #342 -- the match method takes any callable
  * nlsocket: #367 -- increase default SO_SNDBUF
  * ifinfmsg: support tuntap on armv6l, armv7l platforms
- convert to singlespec</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- update to 0.4.18:
  * ipdb: #379 [critical] -- routes in global commits
  * ipdb: #380 -- global commit with disabled plugins
  * ipdb: #381 -- exceptions fixed
  * ipdb: #382 -- manage dependent routes during interface commits
  * ipdb: #384 -- global `review()`
  * ipdb: #385 -- global `drop()`
  * netns: #383 -- support ppc64
  * general: public API refactored (same signatures; to be documented)</changelog>
  <changelog author="tbechtold@suse.com" date="1503662401">- update to 0.4.19:
  * ipdb: global methods `review()`, `drop()`, `dump()`, `load()`
  * ipdb: support VLAN protocol (802.1q, 802.1ad)
  * ipdb: initial support for IPv6 rules
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #394 -- correctly work with route priorities
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="tbechtold@suse.com" date="1505822400">- update to 0.4.21:
  * ipdb: #416 -- workaround for the vrf_table issue
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: use tos as a route key</changelog>
  <changelog author="James Oakley &lt;jfunk@funktronics.ca&gt;" date="1542024000">- update to 0.5.3:
  * bsd: parser improvements
  * ndb: PostgreSQL support
  * ndb: transactions commit/rollback
  * ndb: dependencies rollback
  * ipdb: IPv6 routes fix
  * &lt;https://github.com/svinota/pyroute2/issues/543&gt;
  * tcmsg: ematch support
  * tcmsg: flow filter
  * tcmsg: stats2 support improvements
  * ifinfmsg: GRE i/oflags, i/okey format fixed
  * &lt;https://github.com/svinota/pyroute2/issues/531&gt;
  * cli/ss2: improvements, tests
  * nlsocket: fix work on kernels &lt; 3.2
  * &lt;https://github.com/svinota/pyroute2/issues/526&gt;
- changes from 0.5.2
  * ndb: read-only DB prototype
  * remote: support communication via stdio
  * general: fix async keyword -- Python 3.7 compatibility
  * &lt;https://github.com/svinota/pyroute2/issues/467&gt;
  * &lt;https://bugzilla.redhat.com/show_bug.cgi?id=1583800&gt;
  * iproute: support monitoring on BSD systems via PF_ROUTE
  * rtnl: support for SQL schema in message classes
  * nl80211: improvements
  * &lt;https://github.com/svinota/pyroute2/issues/512&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/514&gt;
  * &lt;https://github.com/svinota/pyroute2/issues/515&gt;
  * netlink: support generators
- changes from 0.5.1
  * ipdb: #310 -- route keying fix
  * ipdb: #483, #484 -- callback internals change
  * ipdb: #499 -- eventloop interface
  * ipdb: #500 -- fix non-default :: routes
  * netns: #448 -- API change: setns() doesn't remove FD
  * netns: #504 -- fix resource leakage
  * bsd: initial commits
- changes from 0.5.0
  * ACHTUNG: ipdb commit logic is changed
  * ipdb: do not drop failed transactions
  * ipdb: #388 -- normalize IPv6 addresses
  * ipdb: #391 -- support both IPv4 and IPv6 default routes
  * ipdb: #392 -- fix MPLS route key reference
  * ipdb: #394 -- correctly work with route priorities
  * ipdb: #408 -- fix IPv6 routes in tables &gt;= 256
  * ipdb: #416 -- fix VRF interfaces creation
  * ipset: multiple improvements
  * tuntap: #469 -- support s390x arch
  * nlsocket: #443 -- fix socket methods resolve order for Python2
  * netns: non-destructive `netns.create()`</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Update to 0.5.4:
  * iproute: basic SR-IOV support, virtual functions setup
  * ipdb: shutdown logging fixed
  * ipset: fix regression
  * netns: pushns() / popns() / dropns() calls</changelog>
  <changelog author="pgajdos@suse.com" date="1555070400">- version update to 0.5.5
  * nftables: rules expressions
  * &lt;https://github.com/svinota/pyroute2/pull/592&gt;
  * netns: ns_pids
  * &lt;https://github.com/svinota/pyroute2/pull/593&gt;
  * ndb: wait() method
  * ndb: add extra logging, log state transitions
  * ndb: nested views, e.g. `ndb.interfaces['br0'].ports
  * cli: port pyroute2-cli to use NDB instead of IPDB
  * iproute: basic Windows support (proof of concept only)
  * remote: support mitogen proxy chains, support remote netns</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559563200">- Update to 0.5.6:
  * ndb.objects.route: multipath routes
  * ndb.objects.rule: basic support
  * ndb.objects.interface: veth fixed
  * ndb.source: fix source restart
  * ndb.log: logging setup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581163200">- Update to version 0.5.7:
  * ndb.objects.netns: prototype
  * ndb: netns management
  * ndb: netns sources autoconnect (disabled by default)
  * wireguard: basic support
  * netns: fix FD leakage
  * &lt;https://github.com/svinota/pyroute2/issues/623&gt;
  * cli: Python3 fixes
  * iproute: support `route('append', ...)`
  * ipdb: fix routes cleanup on link down
  * &lt;https://github.com/svinota/pyroute2/issues/620&gt;
  * wiset: support "mark" ipset type</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1582891200">- update to 0.5.9:
  * ethtool: fix module setup
  * ethtool: initial support &lt;https://github.com/svinota/pyroute2/pull/675&gt;
  * tc: multimatch support &lt;https://github.com/svinota/pyroute2/pull/674&gt;
  * tc: meta support &lt;https://github.com/svinota/pyroute2/pull/671&gt;
  * tc: cake: add stats_app decoder &lt;https://github.com/svinota/pyroute2/pull/662&gt;
  * conntrack: filter &lt;https://github.com/svinota/pyroute2/pull/660&gt;
  * ndb.objects.interface: reload after setns
  * ndb.objects.route: create() dst syntax
  * ndb.objects.route: 'default' syntax
  * wireguard: basic testing</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1584187200">- update to 0.5.10:
  * general: don't use pkg_resources &lt;https://github.com/svinota/pyroute2/issues/677&gt;
  * iproute: fix Windows support
  * netlink: provide the target field
  * ndb: use the target field from the netlink header
  * ndb: multiple SQL fixes, transactions fixed with the PostgreSQL backend
  * ndb: multiple object cache fixes &lt;https://github.com/svinota/pyroute2/issues/683&gt;
  * ndb.schema: drop DB triggers
  * ndb.objects: fix object management within a netns &lt;https://github.com/svinota/pyroute2/issues/628&gt;
  * ndb.objects.route: support route metrics
  * ndb.objects.route: fix default route syntax</changelog>
</package>
<package pkgid="ff96c684f342bfd30db22895c3798e172ef6e492f6c41e79bc118428a1cd3e8a" name="ruby2.5-rubygem-bundler" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp152.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1451995200">- update to version 1.11.2
  - _really_ stop calling `required_ruby_version` on nil
    @specifications (#4147, @indirect)
- update to version 1.11.1
  - lazy-load Psych, again (#4149, @indirect)
  - allow gemspec gems on other platforms (#4150, @indirect)
  - fix --no-coc and --no-mit flags on `gem` (#4148,
    @RochesterinNYC)
  - stop calling `required_ruby_version` on nil @specifications
    (#4147, @indirect)
- update to version 1.11.0
  - fail gracefully when trying to execute a non-executable file
    (#4081, @fotanus)
  - fix a crash when pushing a gem via `rake release` (@segiddins)
  - actual Gemfile and lockfile filenames are used in messages
    (#3672, @segiddins)
  - the git remote for `rake release` is now customizable
    (@skateman)
  - file access permissions errors are now much more friendly
    (#3703, #3735, #3858, #3988, #4009 @repinel, @Elffers,
    @segiddins, @agis-)
  - add support for showing help for plugin commands (@tf)
  - send `X-Gemfile-Source` header to source mirrors (@agis-)
  - show what version upstream dependencies were resolved to in
    conflict messages (@segiddins)
  - add support for using bundler setting to add private access
    credentials for git sources (@frsyuki)
  - take into consideration HTTP proxy settings in `.gemrc`
    (@PG-kura)
  - allow specifying a gem host to push to in the `GEM_HOST`
    environment variable (@pmenglund)
  - when gempec `required_ruby_version` is available and the
    Gemfile specifies a ruby version, resolve for the given ruby
    version (@segiddins)
  - allow setting a `silence_root_warning` setting to silence the
    warning when `bundle install` is run as root (@blackxored)
  - update the `bundle gem` code of conduct template to Contributor
    Covenant v1.3.0 (@CoralineAda)
  - add support for specifying gems to update when running `bundle
    lock` via `--update gem1 gem2` (@JuanitoFatas)
  - added support for MRI 2.3 (@amatsuda)
  - show a helpful message when requiring a file in `bundler
    require` fails (#3960, @agis-)
  - include git revision hash when printing a git source (#3433,
    @agis-)
  - improve hint when a resolution conflict occurs (@seanlinsley)
  - show a friendly error when a git ref is not found (#3879,
    @agis-)
  - improve error message when sources are not absolute URIs
    (#3925, @agis-)
  - add `pkg` to rake's clobber list (#3676, @jasonkarns)
  - retry fetching specs when fetching version metadata fails
    (@jingweno)
  - avoid showing bundler version warning messages twice (@fotanus)
  - fix running `bundle check` with `--path` when the gems are only
    installed globally (@akihiro17)
  - fix `bin/setup` from `bundle gem` assuming `bash` is in `/bin`
  - fail more gracefully when an HTTP remote is unreachable (#3765,
    @steverob)
  - fix a warning running `bundle exec` on jruby 9.0.0.0
    (@deivid-rodriguez, @mastfish)
  - fix the `bundle gem` readme when no tests are generated
    (@roseweixel)
  - the dependencies on test gems in `bundle gem` are now locked to
    major versions (#3811, @indirect)
  - fix the paths for native extensions generated by `--standalone`
    (#3813, @AlexanderPavlenko)
  - fix trying to cache a gem that has no source (@EduardoBautista)
  - fix `--source` option to `bundle update` causing incorrect gem
    unlocking (#3759, #3761, @neoeno)
  - fix handling an empty `BUNDLE_GEMFILE` environment variables
    (#3678, @agis-)
  - avoid cleaning up gem extension directory in `bundle clean`
    (@Sirupsen)
  - fix the `ssl_verify_mode` setting not being treated as a number
    (@goughy000)
  - fix not retrying on zlib errors (#4047, @andremedeiros)
  - fix a warning being shown for using `URI.encode`
    (@EduardoBautista)
  - fix handling of fatal HTTP errors (#3830, @indirect)
  - ensure all `sudo` access is done in a thread-safe manner
    (#3910, @agis-)
  - fix caching gems with a path with the same prefix as the
    bundled application (@indirect)
  - fix showing gemspec validation errors on `bundle exec` (#3895,
    @agis-)
  - distinguish Gemfile syntax and evaluation errors (#3783,
    @agis-)
  - fix nested Gemfile sources not restoring the previous source
    (#3974, @agis-)
  - fix the `RUBYLIB` environment variable not being cleaned
    (#3982, @agis-)
  - fix handling a dependency missing from `Gemfile.lock` so
    parallel installation does not deadlock (#4012, @lukaso)
  - also print gemspecs in `bundle env` output (@agis-)
  - fix handling when a `path` source does not have a gemspec but a
    lockfile says there is (#4004, @segiddins)
  - show a warning when the `RUBYGEMS_GEMDEPS` environment variable
    is set (#3656, @agis-)
  - fix handling invalid RubyGems configuration files (#4042,
    @agis-)
  - fix `bundle console` falling back to `irb` when the preferred
    console is unavailable (@felixbuenemann)
  - restrict platforms when referencing a `gemspec` in the
    `Gemfile` to those defined in the gemspec (#4102, @smellsblue)
  - speed up dependency resolution in pathological cases by 25x
    (#3803, @segiddins)
  - drop string allocations when searching for gems (@jrafanie)
- refreshed gemspec_remove_pem.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1458734400">- Force fixed timestamps for patched gems (bsc#916047)</changelog>
  <changelog author="coolo@suse.com" date="1463832000">- updated to version 1.12.4
  see installed CHANGELOG.md
  [#]# 1.12.4 (2016-05-16)
  Bugfixes:
  - ensure concurrent use of the new index can't corrupt the cache (#4519, @domcleal)
  - allow missing rubygems credentials when pushing a gem with a custom host (#4437, @Cohen-Carlisle)
  - fix installing built-in specs with `--standalone` (#4557, @segiddins)
  - fix `bundle show` when a gem has a prerelease version that includes a `-` (#4385, @segiddins)
  [#]# 1.12.3 (2016-05-06)
  Bugfixes:
  - fix uncoditionally writing `.bundle/config` when running `bundle install` (@segiddins)
  - fall back to the dependency API and the full index when the home directory is not writable (@segiddins)
  [#]# 1.12.2 (2016-05-04)
  Bugfixes:
  - fix modifying a frozen string when the resolver conflicts on dependencies with requirements (#4520, @grzuy)
  - fix `bundle exec foo --help` not showing the invoked command's help (#4480, @b-ggs)
  [#]# 1.12.1 (2016-04-30)
  Bugfixes:
  - automatically fallback when the new index has a checksum mismatch instead of erroring (@segiddins)
  - fix computation of new index file local checksums on Windows (#4472, @mwrock)
  - properly handle certain resolver backtracking cases without erroring (@segiddins, #4484)
  - ensure the `$LOAD_PATH` contains specs' load paths in the correct order (@segiddins, #4482)
  [#]# 1.12.0 (2016-04-28)
  This space intentionally left blank.
  [#]# 1.12.0.rc.4 (2016-04-21)
  Bugfixes:
  - don't fail when `bundle outdated` is run with flags and the lockfile contains non-semver versions (#4438, @RochesterinNYC)
  [#]# 1.12.0.rc.3 (2016-04-19)
  Bugfixes:
  - don't allow new attributes to dirty a lockfile when running `bundle exec`, `-rbundler/setup`, or `bundle check` (@segiddins)
  [#]# 1.12.0.rc.2 (2016-04-15)
  Features:
  - `bundle outdated` handles all combinations of `--major`, `--minor`, and `--patch` (#4396, @RochesterinNYC)
  Bugfixes:
  - prevent endless recursive copy for `bundle package --all` (#4392, @RochesterinNYC)
  - allow executables that are `load`ed to exit non-0 via an `at_exit` hook when invoked by `bundle exec` (@segiddins)
  - nested invocations of `bundle exec` properly preserve the `$PATH` and `$GEM_PATH` environment variables (@segiddins)
  [#]# 1.12.0.rc (2016-03-13)
  Performance:
  - Download gem metadata from globally distributed CDN endpoints (#4358, @segiddins)
  Bugfixes:
  - handle Ruby pre-releases built from source (#4324, @RochesterinNYC)
  - support binstubs from RubyGems 2.6 (#4341, @segiddins)
  - handle quotes present in in PATH (#4326, @segiddins)
  [#]# 1.12.0.pre.2 (2016-02-26)
  Performance:
  - speed up `bundle exec` by `load`ing the executable whenever possible, saving roughly .2 seconds per invocation (@segiddins)
  Features:
  - add a `--patch` flag for `bundle outdated` (@RochesterinNYC)
  - add `Bundler.clean_env` and `Bundler.original_env` (#4232, @njam)
  - add `--frozen` support to `bundle package` (#3356, @RochesterinNYC)
  Bugfixes:
  - place bundler loaded gems after `-I` and `RUBYLIB` (@Elffers)
  - give a better error message when filesystem access raises an `EPROTO` error (#3581, #3932, #4163, @RochesterinNYC)
  - give a better error message when both `--deployment` and `--system` are used together (@RochesterinNYC)
  - fix `$PATH` being preserved for use in `Bundler.with_clean_env` (#4251, @segiddins, @njam)
  - give a better error message when running `bundle outdated` in frozen mode (#4287, @RochesterinNYC)
  - handle when `http_proxy` is set to `:no_proxy` in the rubygems configuration (#4294, @segiddins)
  - give a better error message when authentication details aren't properly escaped (#4288, @RochesterinNYC)
  - fix `bundle outdated --minor` to only report updates that match the current minor version (@RochesterinNYC)
  - fix extra dependencies being resolved unnecessarily (#4276, @segiddins)
  - give a better error message when missing specs due to platform mis-matches (#4259, @RochesterinNYC)
  - skip rebuilding extensions for git gems if they are already built (#4082, @csfrancis, @indirect, @segiddins)
  - fix `bundle install` not installing when the `no_install` setting is set (#3966, @chulkilee, @segiddins)
  [#]# 1.12.0.pre.1 (2016-02-09)
  Performance:
  - speed up `bundle install` and `bundle update` by using the new compact gem index (@segiddins, @fotanus, @indirect)
  - speed up `bundle exec` by avoiding loading the gemfile twice (#2951, #2952, @segiddins)
  Features:
  - add support for using version operators to specify ruby versions in the Gemfile (@jtarchie)
  - redirect `--help` flag for plugins to that plugin's man page (@RochesterinNYC)
  - support probing a mirror with a fallback timeout (#4128, @pcarranza)
  - add `--full-index` option to `bundle lock` (@segiddins)
  - support running with frozen string literals (@deepj, @segiddins)
  - add `--major` and `--minor` options to `bundle outdated` (#3805, @cirdes)
  - allow passing a custom `ui` to `bundler/inline` (@lamont-granquist)
  - add support for ruby 2.4 (#4266, @segiddins)
  - add `bundle outdated --parseable` for machine-readable output (@RochesterinNYC)
  Bugfixes:
  - fix `bundle package --all` recursing endlessly (#4158, @RochesterinNYC)
  - fail fast on more errors when fetching remote resources (#4154, @RochesterinNYC)
  - give a better error message when a given git commit can't be found (#4140, @doy)
  - give a better error message when `bundle clean` doesn't have sufficient permissions (#4170, @RochesterinNYC)
  - give a better error message when reading a bundler config file fails (@segiddins)
  - restrict platforms when referencing a `gemspec` in the `Gemfile` to those defined in the gemspec (#4102, #4150, @smellsblue)
  - fix `bundle gem` with minitest to use the correct rake task (@kotoshenya)
  - give a better error message when ssl isn't available (#4054, @RochesterinNYC)
  - print the original `require` error when `Bundler.require` fails (#4182, @RochesterinNYC)
  - give a better error message when certain resources are temporarily unavailable (#4183, @RochesterinNYC)
  - fix returning case-sensitive gem mirror URIs on ruby 2.3 (@segiddins)
  - ignore colorized output from `git` when determining the current branch (#4056, @agis-)
  - fix storing the shared gems config option as a boolean (@vassilevsky)
  - add support for running `bundle gem --exe` instead of using the `--bin` option (@christhekeele)
  - fix `exec`-ing with 0 args in a directory with spaces (#4230, @segiddins)
  - avoid installing extraneous gems when resolving to an older version of a spec (#4101, #4198, @segiddins)
  - ensure paths resolved when parsing a gemfile are relative to that file (#3349, @dtognazzini)
  - give a better error message when encountering an invalid gemspec (#4248, #4275, @RochesterinNYC)
  - preserve the original `PATH` in `Bundler.with_clean_env` (#4251, @segiddins)
  - ensure standalone file paths are relative to the project root (#4144, @glennpratt)</changelog>
  <changelog author="coolo@suse.com" date="1464177600">- simplify gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1464264000">- updated to version 1.12.5
  see installed CHANGELOG.md
  [#]# 1.12.5 (2016-05-25)
  Bugfixes:
  - only take over `--help` on `bundle exec` when the first two arguments are `exec` and `--help` (#4596, @segiddins)
  - don't require `require: true` dependencies that are excluded via `env` or `install_if` (@BrianHawley)
  - reduce the number of threads used simultaneously by bundler (#4367, @will-in-wi)</changelog>
  <changelog author="coolo@suse.com" date="1475928000">- updated to version 1.13.2
  see installed CHANGELOG.md
  [#]# 1.13.2 (2016-09-30)
  Bugfixes:
  - allow `Settings` to be initialized without a root directory (@m1k3)
  - allow specifying ruby engines in the gemfile as a symbol (#4919, @JuanitoFatas)
  - avoid an execption when using `bundler/deployment` with Vlad (@srbaker)
  - ensure redefined methods have the same visibility as the one they're replacing, fixing `Kernel.require` failing on JRuby (#4975, @segiddins)
  - ensure that Bundler won't complain about a corrupt lockfile when no lockfile exists when using `gemspec` in the Gemfile (#5006, @segiddins)
  - fail gracefully when parsing the metadata for a gemspec from the compact index fails (@segiddins)
  - fix invoking bundler with binstubs generated by RubyGems 2.6.2+ (#4974, @chrismo)
  Performance:
  - avoid parsing the lockfile twice when evaluating gemfiles (@segiddins)
  [#]# 1.13.1 (2016-09-13)
  Bugfixes:
  - ensure that `Gem::Source` is available, fixing several exceptions (#4944, @dekellum)
  - ensure that dependency resolution works when multiple gems have the same dependency (#4961, @segiddins)
  [#]# 1.13.0 (2016-09-05)
  This space deliberately left blank.
  [#]# 1.13.0.rc.2 (2016-08-21)
  Features:
  - add setting `exec_disable_load` to force `exec` to spawn a new Ruby process (@segiddins)
  - add `doctor` command to help with issues like unlinked compiled gems (#4765, @mistydemeo)
  - rework the `update` command, providing fine-grained control via flags (#4676, @chrismo)
  - add URI to http response output in debug mode (#4808, @NickLaMuro)
  - add manpage for `binstubs` command (#4847, @Zorbash)
  - support `mirror` settings for sources by hostname, not only full URL (@opiethehokie)
  - print gem installation errors after other install output (#4834, @segiddins)
  - add `lock --remove-platform` flag to remove platforms from the lock (#4877, @segiddins)
  - add `only_update_to_newer_versions` setting to prevent downgrades during `update` (@segiddins)
  - expanded expirimental plugin support to include hooks and sources (@asutoshpalai)
  Bugfixes:
  - retry gem downloads (#4846, @jkeiser)
  - improve the CompactIndex to handle capitalized legacy gems (#4867, @segiddins)
  - re-use persistent HTTP connections for CompactIndex (@NickLaMuro)
  - respect `required_ruby_version` when Gemfile contains `ruby` version (@indirect)
  - allow `rake release` to sign git tags (#4743, @eagletmt)
  - set process titles when using `#load` during `exec` (@yob)
  - recognize JRuby shebangs for using `#load` during `exec` (@ojab)
  - handle world-writable home directories (#4726, @allenzhao)
  - support multi-platform gems via the `gemspec` Gemfile method (#4798, @segiddins)
  - print dots correctly for CompactIndex fetcher (@NickLaMuro)
  - set an `open_timeout` when requesting gem data via HTTP (@NickLaMuro)
  - rename the BUNDLE\_ORIG\_ENV variable so it no longer shows up in `config` (@indirect)
  - show help only when `-h` or `--help` is passed to Bundler, not to `exec` (#4801, @segiddins)
  - handle symlinks to binstubs created by `--standalone` (#4782, @terinjokes)
  [#]# 1.13.0.rc.1 (2016-06-27)
  Features:
  - when `bundle config major_deprecations` or `BUNDLE_MAJOR_DEPRECATIONS` is set, deprecation warnings for bundler 2 will be printed (@segiddins)
  - when running with `--verbose`, bundler will print the reason it is re-resolving a gemfile (@segiddins)
  Bugfixes:
  - fix support for running RubyGems 1.x on Ruby 2.3 (#4698, @segiddins)
  - fix bundle exec'ing to a ruby file when gems are installed into a path (#4592, @chrismo)
  - when multiple specs in a bundle have the same executable, prefer activating the one from the requested gem (#4705, @segiddins)
  - stop changing the load path to require the vendored postit when trampolining (@segiddins)
  - ensure relative paths are properly printed after completing an installation (@jenseng)
  - fix re-resolving when there are multiple unchanged path sources (@segiddins)
  - de-init submodules when running git 2.9 and requesting a git gem without submodules (@segiddins)
  [#]# 1.13.0.pre.1 (2016-06-20)
  Performance:
  - speed up gemfile resolution during `bundle install` by between 4x-100x (#4376, @segiddins)
  - generally reduce object allocations when using bundler (@segiddins)
  - speed up bin generation for path gems with many files (#2846, @segiddins)
  - fix detecting path spec changes to avoid re-resolving unnecessarily (@jrafanie)
  Features:
  - automatically trampoline to the bundler version locked in the lockfile, only updating to the running version on `bundle update --bundler` (@segiddins)
  - laying the groundwork for plugin support, which is currently unsuppported, undocumented, disabled by default, and liable to change without notice (@asutoshpalai)
  - allow `bundle viz --without` to accept multiple `:`-delimited groups (@mobilutz)
  - support for RubyGems 2.6.4 (#4368, @segiddins, @RochesterinNYC)
  - colorize updated gem versions (#4334, @bronzdoc)
  - add the `--standalone` flag to `bundle binstubs` (#4594, @b-ggs)
  - update the `bundle gem` CoC to contributor covenant v1.4 (@cllns)
  - use a custom YAML serializer to make config file consistent (@segiddins)
  - filter credentials from error messages (bundler/bundler-features#111, @RochesterinNYC, @sandlerr)
  - support relative paths used inside a nested invocation of `eval_gemfile` (#4584, @RochesterinNYC)
  - fail gracefully when attempting to install a yanked gem (#4344, @allenzhao)
  - automatically install an inline gemfile when gems are missing locally (@segiddins)
  - allow conflicts for gems resolved via `gemspec` (@segiddins)
  - add `--add-platform` option to `bundle lock` (@segiddins)
  - fail gracefully when a resolved spec's `required_ruby_version` or `required_rubygems_version` is incompatible (@segiddins)
  Bugfixes:
  - implicitly unlock the resolved ruby version when the declared requirements in the gemfile are incompatible with the locked version (#4595, #4627, @segiddins)
  - add support for quoted paths in `$PATH` (#4323, @segiddins)
  - check out missing git repos that are not being installed (#3981, @asutoshpalai)
  - write `bundler/setup.rb` to a consistent path (@glennpratt)
  - open editor in `bundle open` with a clean environment (@sj26)
  - resolve infinitely recursive copy when running `bundle package --all` with a `gemspec` in the gemfile (#4392, #4430, @RochesterinNYC)
  - fail gracefully when encountering an `Errno::ENOTSUP` (#4394, @segiddins)
  - fail gracefully when encountering an `Errno::EHOSTUNREACH` (#4642, @allenzhao)
  - fix loading config files with very long values (#4370, @segiddins)
  - only show potential updates for gemfile platforms in `bundle outdated` (#4450, @RochesterinNYC)
  - allow running `bundle install --deployment` after `bundle package --all` with path gems (#2175, @allenzhao)
  - add support for patchlevels in ruby versions in the gemfile and gemspecs (#4593, @chalkos)</changelog>
  <changelog author="coolo@suse.com" date="1477742400">- updated to version 1.13.6
  see installed CHANGELOG.md
  [#]# 1.13.6 (2016-10-22)
  Bugfixes:
  - make the `gem` method public again, fixing a regression in 1.13.4 (#5102, @segiddins)
  [#]# 1.13.5 (2016-10-15)
  Bugfixes:
  - Ensure a locked pre-release spec can always be re-resolved (#5089, @segiddins)
  [#]# 1.13.4 (2016-10-11)
  Bugfixes:
  - stop printing warning when compact index versions file is rewritten (#5064, @indirect)
  - fix `parent directory is world writable but not sticky` error on install (#5043, @indirect)
  - fix for `uninitialized constant Bundler::Plugin::API::Source` error (#5010, @hsbt, @aycabta)
  - make `update` options for major, minor, and patch updates consistent (#4934, @chrismo)
  [#]# 1.13.3 (2016-10-10)
  Bugfixes:
  - add support for weak etags to the new index (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1479038400">- update patch</changelog>
  <changelog author="coolo@suse.com" date="1487073600">- updated to version 1.14.4
  see installed CHANGELOG.md
  [#]# 1.14.4 (2017-02-12)
  Bugfixes:
  - fail gracefully when attempting to overwrite an existing directory with `bundle gem` (#5358, @nodo)
  - fix a resolver bug that would cause bundler to report conflicts that it could resolve (#5359, #5362, @segiddins)
  - set native extension build arguments for git gems (#5401, @segiddins)
  - fix the suggested `bundle lock` command printed when a dependency is unused on any platform (@5t111111)
  - ensure the version passed to `ruby` in the Gemfile is valid during Gemfile parsing (#5380, @segiddins)
  - show `bundle inject` usage when too many arguments are passed (#5384, @Shekharrajak)
  - stop `bundle show --outdated` from implicitly running `bundle update` (#5375, @colby-swandale)
  - allow the temporary home directory fallback to work for multiple users (@svoop)
  [#]# 1.14.3 (2017-01-24)
  Bugfixes:
  - fix the resolver attemting to activate ruby-platform gems when the bundle is only for other platforms (#5349, #5356, @segiddins)
  - avoid re-resolving a locked gemfile that uses `gemspec` and includes development dependencies (#5349, @segiddins)
  [#]# 1.14.2 (2017-01-22)
  Bugfixes:
  - fix using `force_ruby_platform` on windows (#5344, @segiddins)
  - fix an incorrect version conflict error when using `gemspec` on multiple platforms (#5340, @segiddins)
  [#]# 1.14.1 (2017-01-21)
  Bugfixes:
  - work around a ruby 2.2.2 bug that caused a stack consistency error during installation (#5342, @segiddins)
  [#]# 1.14.0 (2017-01-20)
  Bugfixes:
  - ensure `Settings::Mirror` is autoloaded under the `Settings` namespace
    (#5238, @segiddins)
  - fix `bundler/inline` when `BUNDLE_GEMFILE=""` (#5079, @segiddins)
  [#]# 1.14.0.pre.2 (2017-01-11)
  Bugfixes:
  - allow not selecting a gem when running `bundle open` (#5301, @segiddins)
  - support installing gems from git branches that contain shell metacharacters (#5295, @segiddins)
  - fix a resolver error that could leave dependencies unresolved (#5294, @segiddins)
  - fix a stack overflow error when invoking commands (#5296, @segiddins)
  [#]# 1.14.0.pre.1 (2016-12-29)
  Features:
  - `bundle doctor` first runs `bundle check` (@segiddins)
  - the bundler trampoline is automatically enabled when the target version is greater than bundler 2 (@segiddins)
  - gem checksums returned by rubygems.org are validated when installing gems (#4464, @segiddins)
  - use the git username as a github username when running `bundle gem` (@JuanitoFatas)
  - show more context when the resolver conflicts on required ruby and rubygems versions (@segiddins)
  - improve platform support by allowing bundler to pick the best platform match during dependency resolution, enabled with the `specific_platform` setting (#4295, #4896, @segiddins)
  - always prompt the user for a password when using `sudo` (#3006, @segiddins)
  - support running without a home directory (#4778, @segiddins)
  - print a warning when the gemfile uses a platform conditional that will exclude the gem from all lockfile platforms (@segiddins)
  - add the `force_ruby_platform` setting to force bundler to install ruby-platform gems, even on other platforms (#4813, @segiddins)
  - add conservative update options to `bundle lock` (#4912, @chrismo)
  - improve `bundle outdated` output to group gems by group (@ryanfox1985)
  - add conservative update options to `bundle update` (#5065, #5076, @chrismo)
  - print the output of `bundle env` as github-flavored markdown, making it easier to preserve formatting when copy-pasting into a new issue (@segiddins)
  - configure the persistence file when using `bundle gem` with `rspec` (@segiddins)
  - add support for the `ruby_25` gemfile filter (@amatsuda)
  - when installing with a lockfile that is missing dependencies, allow installation to proceed (but without parallelism) (@segiddins)
  Performance:
  - improve `require "bundler"` performance by ~5x (@segiddins)
  - allow install gems in parallel when running on rubygems 2+
  Bugfixes:
  - config files with CRLF line endings can be read (#4435, @segiddins)
  - `bundle lock` activates gems for the current platform even if they were activated under a different platform for a separate dependency (#4896, @segiddins)
  - running `bundle env` in a directory without a gemfile no longer crashes (@segiddins)
  - fail gracefully when attempting to use a source with an unknown URI scheme (#4953, @segiddins)
  - store paths in the lockfile relative to the root gemfile directory when using `eval_gemfile` (#4966, @segiddins)
  - `bundle lock` will not update without the `--update` flag (#4957, @segiddins)
  - the `console` binstub generated by `bundle gem` will load `.irbrc` files (@mattbrictson)
  - print friendly filesystem access errors in the new index (@segiddins)
  - print a helpful error when running out of memory on jruby (#4673, @segiddins)
  - load all rubygems plugins when installing gems (#2824, @segiddins)
  - `bundle clean --dry-run` prints the list of gems without the `--force` option when no path is set (#5027, @hmistry)
  - local installs no longer print "this gem may have been yanked" (#5022, @hmistry)
  - avoid leaking `which` output when running `bundle doctor` (@colby-swandale)
  - print a warning when attempting to `bundle exec` an empty program (#5084, @bronzdoc)
  - ensure `bundle outdated` lists all outdated gems (#4979, @chrismo)
  - fail gracefully when attempting to `bundle gem` with an invalid constant name (#5185, @segiddins)
  - allow `bundler/inline` to work in a directory that contains a gemfile (#5117, @colby-swandale)
  - ensure that the new index is thread-safe, allowing installation on rbx (#5142, @segiddins)
  - remove deprecated `rspec` syntax in `bundle gem` output (@gearnode)
  - fail gracefully when any system error is encountered when touching the filesystem (#5134, @segiddins)
  - fix compatibility with a machine running with FIPS mode enabled (#4989, @segiddins)
  - fix `bundle lock --add-platform ruby` (#5230, @segiddins)
  - print gem post-install messages when running `bundle update` (@smathy)
  - ensure errors due to a retries are all separated by a newline (@segiddins)
  - print out the bundle path in gem not found errors (#4854, @diegosteiner)
  - fail gracefully when creating threads fails (@segiddins)
  - avoid downloading metadata for gems that are only development dependencies (@Paxa)
  [#]# 1.13.7 (2016-12-25)
  Features:
  - add support for the `ruby_24` gemfile filter (#5281, @amatsuda)</changelog>
  <changelog author="coolo@suse.com" date="1489665600">- updated to version 1.14.6
  see installed CHANGELOG.md
  [#]# 1.14.6 (2017-03-03)
  Bugfixes:
  - avoid undefined constant `Bundler::Plugin::API::Source` exception (#5409, @segiddins)
  - avoid incorrect warnings about needing to enable `specific_platform` (@segiddins)
  - fail gracefully when the compact index does not send an ETag (#5463, @olleolleolle)
  - ensure `bundle outdated --local` shows all outdated gems (#5430, @denniss)
  - fix a case where ruby version requirements could lead to incorrect resolver conflicts (#5425, @segiddins)
  [#]# 1.14.5 (2017-02-22)
  Bugfixes:
  - avoid loading all unused gemspecs during `bundle exec` on RubyGems 2.3+ (@segiddins)
  - improve resolver performance when dependencies have zero or one total possibilities ignoring requirements (#5444, #5457, @segiddins)
  - enable compact index when OpenSSL FIPS mode is enabled but not active (#5433, @wjordan)
  - use github username instead of git name for the github url in `bundle gem` (#5438, @danielpclark)
  - avoid a TypeError on RubyGems 2.6.8 when no build settings are set for native extensions (@okkez)
  - fail gracefully when the dependency api is missing runtime dependencies for a gem (@segiddins)
  - handle when a platform-specific gem has more dependencies than the ruby platform version (#5339, #5426, @segiddins)
  - allow running bundler on a machine with no home directory where the temporary directory is not writable (#5371, @segiddins)
  - avoid gem version conflicts on openssl using Ruby 2.5 (#5235, @rhenium)
  - fail when installing in frozen mode and the dependencies for `gemspec` gems have changed without the lockfile being updated (#5264, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1489665601">- fix gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1495540800">- updated to version 1.15.0
  see installed CHANGELOG.md
  [#]# 1.15.0 (2017-05-19)
  This space intentionally left blank.
  [#]# 1.15.0.pre.4 (2017-05-10)
  Bugfixes:
  - avoid conflicts when `Gem.finish_resolve` is called after the bundle has been set up (@segiddins)
  - ensure that `Gem::Specification.find_by_name` always returns an object that can have `#to_spec` called on it (#5592, @jules2689)
  [#]# 1.15.0.pre.3 (2017-04-30)
  Bugfixes:
  - avoid redundant blank lines in the readme generated by `bundle gem` (@koic)
  - ensure that `open-uri` is not loaded after `bundle exec` (@segiddins)
  - print a helpful error message when an activated default gem conflicts with
    a gem in the gemfile (@segiddins)
  - only shorten `ref` option for git gems when it is a SHA (#5620, @segiddins)
  [#]# 1.15.0.pre.2 (2017-04-23)
  Bugfixes:
  - ensure pre-existing fit caches are updated from remote sources (#5423, @alextaylor000)
  - avoid duplicating specs in the lockfile after updating with the gem uninstalled (#5599, @segiddins)
  - ensure git gems have their extensions available at runtime (#5594, @jules2689, @segiddins)
  [#]# 1.15.0.pre.1 (2017-04-16)
  Features:
  - print a notification when a newer version of bundler is available (#4683, @segiddins)
  - add man pages for all bundler commands (#4988, @feministy)
  - add the `bundle info` command (@fredrb, @colby-swandale)
  - all files created with `bundle gem` comply with the bundler style guide (@zachahn)
  - if installing a gem fails, print out the reason the gem needed to be installed (#5078, @segiddins)
  - allow setting `gem.push_key` to set the key used when running `rake release` (@DTrierweiler)
  - print gem versions that are regressing during `bundle update` in yellow (#5506, @brchristian)
  - avoid printing extraneous dependencies when the resolver encounters a conflict (@segiddins)
  - add the `bundle issue` command that prints instructions for reporting issues (#4871, @jonathanpike)
  - add `--source` and `--group` options to the `bundle inject` command (#5452, @Shekharrajak)
  - add the `bundle add` command to add a gem to the gemfile (@denniss)
  - add the `bundle pristine` command to re-install gems from cached `.gem` files (#4509, @denniss)
  - add a `--parseable` option for `bundle config` (@JuanitoFatas, @colby-swandale)
  Performance:
  - speed up gemfile initialization by storing locked dependencies as a hash (@jules2689)
  - speed up gemfile initialization by making locked dependency comparison lazy, avoiding object allocation (@jules2689)
  - only validate git gems when they are downloaded, instead of every time `Bundler.setup` is run (@segiddins)
  - avoid regenerating the lockfile when nothing has changed (@segiddins)
  - avoid diffing large arrays when no sources in the gemfile have changed (@segiddins)
  - avoid evaluating full gemspecs when running with RubyGems 2.5+ (@segiddins)
  Bugfixes:
  - fix cases where `bundle update` would print a resolver conflict instead of updating the selected gems (#5031, #5095, @segiddins)
  - print out a stack trace after an interrupt when running in debug mode (@segiddins)
  - print out when bundler starts fetching a gem from a remote server (@segiddins)
  - fix `bundle gem` failing when `git` is unavailable (#5458, @Shekharrajak, @colby-swandale)
  - suggest the appropriate command to unfreeze a bundle (#5009, @denniss)
  - ensure nested calls to `bundle exec` resolve default gems correctly (#5500, @segiddins)
  - ensure that a plugin failing to install doesn't uninstall other plugins (@kerrizor, @roseaboveit)
  - ensure `socket` is required before being referenced (#5533, @rafaelfranca)
  - allow running `bundle outdated` when gems aren't installed locally (#5553, @segiddins)
  - print a helpful error when `bundle exec`ing to a gem that isn't included in the bundle (#5487, @segiddins)
  - print an error message when a non-git gem is given a `branch` option (#5530, @colby-swandale)
  - allow interrupts to exit the process after gems have been installed (@segiddins)
  - print the underlying error when downloading gem metadata fails (#5579, @segiddins)
  - avoid deadlocking when installing with a lockfile that is missing dependencies (#5378, #5480, #5519, #5526, #5529, #5549, #5572, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1497614400">- update to 1.15.1
  - Bugfixes:
  - `bundle lock --update GEM` will fail gracefully when the gem
    is not in the lockfile (#5693, @segiddins)
  - `bundle init --gemspec` will fail gracefully when the gemspec
    is invalid (@colby-swandale)
  - `bundle install --force` works when the gemfile contains git
    gems (#5678, @segiddins)
  - `bundle env` will print well-formed markdown when there are
    no settings (#5677, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552000">- update to 1.15.2
  - Features:
  - new gemfiles created by bundler will include an explicit
    `github` git source that uses `https` (@segiddins)
  - Bugfixes:
  - inline gemfiles work when `BUNDLE_BIN` is set (#5847,
    @segiddins)
  - avoid using the old dependency API when there are no changes
    to the compact index files (#5373, @greysteil)
  - fail gracefully when the full index serves gemspecs with
    invalid dependencies (#5797, @segiddins)
  - support installing gemfiles that use `eval_gemfile`, `:path`
    gems with relative paths, and `--deployment` simultaneously
    (@NickLaMuro)
  - `bundle config` will print settings as the type they are
    interpreted as (@segiddins)
  - respect the `no_proxy` environment variable when making
    network requests (#5781, @jakauppila)
  - commands invoked with `--verbose` will not have default flags
    printed (@segiddins)
  - allow `bundle viz` to work when another gem has a requirable
    `grapviz` file (#5707, @segiddins)
  - ensure bundler puts activated gems on the `$LOAD_PATH` in a
    consistent order (#5696, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552001">- switch to already patched gem file until we figure out how to
  handle the slightly different gem spec --ruby output on TW</changelog>
  <changelog author="coolo@suse.com" date="1501761600">- updated to version 1.15.3
  see installed CHANGELOG.md
  [#]# 1.15.3 (2017-07-21)
  Bugfixes:
  - ensure that empty strings passed to `bundle config` are serialized &amp; parsed properly (#5881, @segiddins)
  - avoid printing an outdated version warning when running a parseable command (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1504440000">- updated to version 1.15.4
  see installed CHANGELOG.md
  [#]# 1.15.4 (2017-08-19)
  Bugfixes:
  - handle file conflicts gracefully in `bundle gem` (@rafaelfranca, @segiddins)
  - bundler will fail gracefully when the bundle path contains the system path separator (#5485, ajwann)
  - failed gem downloads will be retried consistently across different RubyGems versions (@shayonj)
  - `bundle pristine` will respect build options while re-building native extensions (@NickLaMuro)</changelog>
  <changelog author="coolo@suse.com" date="1512302400">- updated to version 1.16.0
  see installed CHANGELOG.md
  [#]# 1.16.0 (2017-10-31)
  Bugfixes:
  - avoid new RubyGems warning about unsafe YAML loading (to keep output consistent) (@segiddins)
  - load digest subclasses in a thread-safe manner (@segiddins, @colby-swandale)
  - avoid unusued variable warnings under ruby 2.5 (@amatsuda)
  - fix printing the same message twice in verbose mode ([#6028](https://github.com/bundler/bundler/issues/6028), @akhramov)
  - allow `SignalException`s to bubble up to the interpreter during `bundle exec` ([#6090](https://github.com/bundler/bundler/issues/6090), @dekellum)
  - avoid activating stdlib digest under Ruby 2.5 (@segiddins)
  - prioritise explicitly requested gems in dependency resolution sort order (@segiddins)
  - reduce memory usage during dependency resolution ([#6114](https://github.com/bundler/bundler/issues/6114), @greysteil)
  - ensure that the default bundler gem is not accidentally activated on ruby 2.5 when using local git overrides (@segiddins)
  [#]# 1.16.0.pre.3 (2017-10-04)
  Features:
  - the output from `bundle env` includes more information, particularly both the compiled &amp; loaded versions of OpenSSL (@indirect)
  Bugfixes:
  - fix a bug where installing on FreeBSD would accidentally raise an error (#6013, @olleolleolle)
  - fix a regression in 1.16 where pre-release gems could accidentally be resolved even when the gemfile contained no pre-release requirements (@greysteil)
  - bundler will avoid making unnecessary network requests to fetch dependency data, fixing a regression introduced in 1.16 (@segiddins)
  - the outdated bundler version message is disabled by default until the message has been fine-tuned (#6004, @segiddins)
  [#]# 1.16.0.pre.2 (2017-09-06)
  Bugfixes:
  - handle when a connection is missing a socket when warning about OpenSSL version (@greysteil)
  - the description for the `rake release` task now reflects `$RUBYGEMS_HOST` (@wadetandy)
  - fix a bug where `bundle update` would regress transitive dependencies (@greysteil)
  [#]# 1.16.0.pre.1 (2017-09-04)
  Features:
  - allow using non-branch symbolic refs in a git source (#4845, @segiddins)
  - allow absolute paths in the `cache path` setting (#5627, @mal)
  - gems created via `bundle gem` with rspec have `--require spec_helper` in their `.rspec` file (@koic)
  - `bundle env` includes `Gem.ruby` and the `bundle` binstub shebang when they don't match (#5616, @segiddins)
  - allow passing gem names to `bundle pristine` (@segiddins)
  - `bundle version` and `bundle env` include the commit and build date for the bundler gem (#5049, @segiddins)
  - add the `--shebang` option to `bundle binstubs` (#4070, @segiddins, @Zorbash)
  - gemfiles are `eval`ed one fewer time when running `bundle install` (#4952, #3096, #4417, @segiddins)
  - the `fileutils` gem is now vendored so different versions of the gem can be activated (@segiddins)
  - speed up no-op installations (#5842, @segiddins)
  - default to keeping the lockfile in the default gem template (@deivid-rodriguez)
  - add a special bundler binstub that ensures the correct version of bundler is activated (#5876, @segiddins)
  - speed up dependency resolution and ensure that all resolvable gemfiles can be installed (@segiddins, @greysteil)
  - add a `bundle list` command that prints the gems in use (#4754, @colby-swandale)
  - allow adding credentials to a gem source during deployment when `allow_deployment_source_credential_changes` is set (@adrian-gomez)
  - making an outdated (and insecure) TLS connection to rubygems.org will print a warning (@segiddins)
  Bugfixes:
  - allow configuring a mirror fallback timeout without a trailing slash (#4830, @segiddins)
  - fix handling of mirrors for file: urls that contain upper-case characters (@segiddins)
  - list the correct gem host for `rake release` when `allowed_push_host` has been set (@mdeering)
  - ensure `Bundler.original_env` preserves all env keys that bundler sets (#5700, @segiddins)
  - ensure `bundle pristine` removes files added to a git gem (@segiddins)
  - load plugin files from path gems before gem installation (#5429, @segiddins)
  - ensure gems containing manpages are properly set up (#5730, @segiddins)
  - avoid fetching remote specs when all effected gems are in groups that are not being installed (@segiddins)
  - allow `BUNDLE_GEMFILE` to be a relative path (#5712, @gxespino)
  - show a more helpful error message when a gem fails to install due to a corrupted lockfile (#5846, @segiddins)
  - add a process lock to allow multiple concurrent `bundle install`s (#5851, @stefansedich)
  - ensure that specifications always return an array for `#extensions` (@greysteil)
  - print a helpful error message when using a gem in the Gemfile with an empty name (@colby-swandale)
  - ensure that all gemfiles are included in `bundle env` (@segiddins)
  - use ssl client cert and ca cert settings from gem configuration as fallbacks (@stan3)
  - avoid global namespace pollution when loading gems (#5958, @shyouhei)
  - avoid running a complete re-resolve on `bundle update --bundler` (@segiddins)
  - allow `bundle binstubs --standalone` to work without `path` being set (@colby-swandale)
  - fix support for bundle paths that include jars or wars on jruby (#5975, @torcido)</changelog>
  <changelog author="coolo@suse.com" date="1515499200">- updated to version 1.16.1
  see installed CHANGELOG.md
  [#]# 1.16.1 (2017-12-12)
  Bugfixes:
  - avoid hanging on complex resolver errors ([#6114](https://github.com/bundler/bundler/issues/6114), @halfbyte)
  - avoid an error when running `bundle update --group` ([#6156](https://github.com/bundler/bundler/issues/6156), @mattbrictson)
  - ensure the resolver prefers non-pre-release gems when possible ([#6181](https://github.com/bundler/bundler/issues/6181), @greysteil)
  - include bundler's gemspec in the built gem ([#6165](https://github.com/bundler/bundler/issues/6165), @dr-itz)
  - ensure locally installed specs are not overriden by those in remote sources during dependency resolution ([#6072](https://github.com/bundler/bundler/issues/6072), @indirect)
  - ensure custom gemfiles are respected in generated binstubs (@pftg)
  - fail gracefully when loading a bundler-generated binstub when `bin/bundle` was not generated by bundler ([#6149](https://github.com/bundler/bundler/issues/6149), @hsbt)
  - allow `bundle init` to be run even when a parent directory contains a gemfile ([#6205](https://github.com/bundler/bundler/issues/6205), @colby-swandale)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1590494400">- added https://patch-diff.githubusercontent.com/raw/rubygems/bundler/pull/7416.patch
  VUL-0: CVE-2019-3881: rubygem-bundler: Insecure permissions on
  directory in /tmp/ allows malicious code execution (boo#1143436)</changelog>
</package>
<package pkgid="e2b4001d41a9a1ec0c2d351aeb015b3d30ef2aca9397a357b0d10b402e841433" name="ruby2.5-rubygem-bundler-doc" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp152.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1451995200">- update to version 1.11.2
  - _really_ stop calling `required_ruby_version` on nil
    @specifications (#4147, @indirect)
- update to version 1.11.1
  - lazy-load Psych, again (#4149, @indirect)
  - allow gemspec gems on other platforms (#4150, @indirect)
  - fix --no-coc and --no-mit flags on `gem` (#4148,
    @RochesterinNYC)
  - stop calling `required_ruby_version` on nil @specifications
    (#4147, @indirect)
- update to version 1.11.0
  - fail gracefully when trying to execute a non-executable file
    (#4081, @fotanus)
  - fix a crash when pushing a gem via `rake release` (@segiddins)
  - actual Gemfile and lockfile filenames are used in messages
    (#3672, @segiddins)
  - the git remote for `rake release` is now customizable
    (@skateman)
  - file access permissions errors are now much more friendly
    (#3703, #3735, #3858, #3988, #4009 @repinel, @Elffers,
    @segiddins, @agis-)
  - add support for showing help for plugin commands (@tf)
  - send `X-Gemfile-Source` header to source mirrors (@agis-)
  - show what version upstream dependencies were resolved to in
    conflict messages (@segiddins)
  - add support for using bundler setting to add private access
    credentials for git sources (@frsyuki)
  - take into consideration HTTP proxy settings in `.gemrc`
    (@PG-kura)
  - allow specifying a gem host to push to in the `GEM_HOST`
    environment variable (@pmenglund)
  - when gempec `required_ruby_version` is available and the
    Gemfile specifies a ruby version, resolve for the given ruby
    version (@segiddins)
  - allow setting a `silence_root_warning` setting to silence the
    warning when `bundle install` is run as root (@blackxored)
  - update the `bundle gem` code of conduct template to Contributor
    Covenant v1.3.0 (@CoralineAda)
  - add support for specifying gems to update when running `bundle
    lock` via `--update gem1 gem2` (@JuanitoFatas)
  - added support for MRI 2.3 (@amatsuda)
  - show a helpful message when requiring a file in `bundler
    require` fails (#3960, @agis-)
  - include git revision hash when printing a git source (#3433,
    @agis-)
  - improve hint when a resolution conflict occurs (@seanlinsley)
  - show a friendly error when a git ref is not found (#3879,
    @agis-)
  - improve error message when sources are not absolute URIs
    (#3925, @agis-)
  - add `pkg` to rake's clobber list (#3676, @jasonkarns)
  - retry fetching specs when fetching version metadata fails
    (@jingweno)
  - avoid showing bundler version warning messages twice (@fotanus)
  - fix running `bundle check` with `--path` when the gems are only
    installed globally (@akihiro17)
  - fix `bin/setup` from `bundle gem` assuming `bash` is in `/bin`
  - fail more gracefully when an HTTP remote is unreachable (#3765,
    @steverob)
  - fix a warning running `bundle exec` on jruby 9.0.0.0
    (@deivid-rodriguez, @mastfish)
  - fix the `bundle gem` readme when no tests are generated
    (@roseweixel)
  - the dependencies on test gems in `bundle gem` are now locked to
    major versions (#3811, @indirect)
  - fix the paths for native extensions generated by `--standalone`
    (#3813, @AlexanderPavlenko)
  - fix trying to cache a gem that has no source (@EduardoBautista)
  - fix `--source` option to `bundle update` causing incorrect gem
    unlocking (#3759, #3761, @neoeno)
  - fix handling an empty `BUNDLE_GEMFILE` environment variables
    (#3678, @agis-)
  - avoid cleaning up gem extension directory in `bundle clean`
    (@Sirupsen)
  - fix the `ssl_verify_mode` setting not being treated as a number
    (@goughy000)
  - fix not retrying on zlib errors (#4047, @andremedeiros)
  - fix a warning being shown for using `URI.encode`
    (@EduardoBautista)
  - fix handling of fatal HTTP errors (#3830, @indirect)
  - ensure all `sudo` access is done in a thread-safe manner
    (#3910, @agis-)
  - fix caching gems with a path with the same prefix as the
    bundled application (@indirect)
  - fix showing gemspec validation errors on `bundle exec` (#3895,
    @agis-)
  - distinguish Gemfile syntax and evaluation errors (#3783,
    @agis-)
  - fix nested Gemfile sources not restoring the previous source
    (#3974, @agis-)
  - fix the `RUBYLIB` environment variable not being cleaned
    (#3982, @agis-)
  - fix handling a dependency missing from `Gemfile.lock` so
    parallel installation does not deadlock (#4012, @lukaso)
  - also print gemspecs in `bundle env` output (@agis-)
  - fix handling when a `path` source does not have a gemspec but a
    lockfile says there is (#4004, @segiddins)
  - show a warning when the `RUBYGEMS_GEMDEPS` environment variable
    is set (#3656, @agis-)
  - fix handling invalid RubyGems configuration files (#4042,
    @agis-)
  - fix `bundle console` falling back to `irb` when the preferred
    console is unavailable (@felixbuenemann)
  - restrict platforms when referencing a `gemspec` in the
    `Gemfile` to those defined in the gemspec (#4102, @smellsblue)
  - speed up dependency resolution in pathological cases by 25x
    (#3803, @segiddins)
  - drop string allocations when searching for gems (@jrafanie)
- refreshed gemspec_remove_pem.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1458734400">- Force fixed timestamps for patched gems (bsc#916047)</changelog>
  <changelog author="coolo@suse.com" date="1463832000">- updated to version 1.12.4
  see installed CHANGELOG.md
  [#]# 1.12.4 (2016-05-16)
  Bugfixes:
  - ensure concurrent use of the new index can't corrupt the cache (#4519, @domcleal)
  - allow missing rubygems credentials when pushing a gem with a custom host (#4437, @Cohen-Carlisle)
  - fix installing built-in specs with `--standalone` (#4557, @segiddins)
  - fix `bundle show` when a gem has a prerelease version that includes a `-` (#4385, @segiddins)
  [#]# 1.12.3 (2016-05-06)
  Bugfixes:
  - fix uncoditionally writing `.bundle/config` when running `bundle install` (@segiddins)
  - fall back to the dependency API and the full index when the home directory is not writable (@segiddins)
  [#]# 1.12.2 (2016-05-04)
  Bugfixes:
  - fix modifying a frozen string when the resolver conflicts on dependencies with requirements (#4520, @grzuy)
  - fix `bundle exec foo --help` not showing the invoked command's help (#4480, @b-ggs)
  [#]# 1.12.1 (2016-04-30)
  Bugfixes:
  - automatically fallback when the new index has a checksum mismatch instead of erroring (@segiddins)
  - fix computation of new index file local checksums on Windows (#4472, @mwrock)
  - properly handle certain resolver backtracking cases without erroring (@segiddins, #4484)
  - ensure the `$LOAD_PATH` contains specs' load paths in the correct order (@segiddins, #4482)
  [#]# 1.12.0 (2016-04-28)
  This space intentionally left blank.
  [#]# 1.12.0.rc.4 (2016-04-21)
  Bugfixes:
  - don't fail when `bundle outdated` is run with flags and the lockfile contains non-semver versions (#4438, @RochesterinNYC)
  [#]# 1.12.0.rc.3 (2016-04-19)
  Bugfixes:
  - don't allow new attributes to dirty a lockfile when running `bundle exec`, `-rbundler/setup`, or `bundle check` (@segiddins)
  [#]# 1.12.0.rc.2 (2016-04-15)
  Features:
  - `bundle outdated` handles all combinations of `--major`, `--minor`, and `--patch` (#4396, @RochesterinNYC)
  Bugfixes:
  - prevent endless recursive copy for `bundle package --all` (#4392, @RochesterinNYC)
  - allow executables that are `load`ed to exit non-0 via an `at_exit` hook when invoked by `bundle exec` (@segiddins)
  - nested invocations of `bundle exec` properly preserve the `$PATH` and `$GEM_PATH` environment variables (@segiddins)
  [#]# 1.12.0.rc (2016-03-13)
  Performance:
  - Download gem metadata from globally distributed CDN endpoints (#4358, @segiddins)
  Bugfixes:
  - handle Ruby pre-releases built from source (#4324, @RochesterinNYC)
  - support binstubs from RubyGems 2.6 (#4341, @segiddins)
  - handle quotes present in in PATH (#4326, @segiddins)
  [#]# 1.12.0.pre.2 (2016-02-26)
  Performance:
  - speed up `bundle exec` by `load`ing the executable whenever possible, saving roughly .2 seconds per invocation (@segiddins)
  Features:
  - add a `--patch` flag for `bundle outdated` (@RochesterinNYC)
  - add `Bundler.clean_env` and `Bundler.original_env` (#4232, @njam)
  - add `--frozen` support to `bundle package` (#3356, @RochesterinNYC)
  Bugfixes:
  - place bundler loaded gems after `-I` and `RUBYLIB` (@Elffers)
  - give a better error message when filesystem access raises an `EPROTO` error (#3581, #3932, #4163, @RochesterinNYC)
  - give a better error message when both `--deployment` and `--system` are used together (@RochesterinNYC)
  - fix `$PATH` being preserved for use in `Bundler.with_clean_env` (#4251, @segiddins, @njam)
  - give a better error message when running `bundle outdated` in frozen mode (#4287, @RochesterinNYC)
  - handle when `http_proxy` is set to `:no_proxy` in the rubygems configuration (#4294, @segiddins)
  - give a better error message when authentication details aren't properly escaped (#4288, @RochesterinNYC)
  - fix `bundle outdated --minor` to only report updates that match the current minor version (@RochesterinNYC)
  - fix extra dependencies being resolved unnecessarily (#4276, @segiddins)
  - give a better error message when missing specs due to platform mis-matches (#4259, @RochesterinNYC)
  - skip rebuilding extensions for git gems if they are already built (#4082, @csfrancis, @indirect, @segiddins)
  - fix `bundle install` not installing when the `no_install` setting is set (#3966, @chulkilee, @segiddins)
  [#]# 1.12.0.pre.1 (2016-02-09)
  Performance:
  - speed up `bundle install` and `bundle update` by using the new compact gem index (@segiddins, @fotanus, @indirect)
  - speed up `bundle exec` by avoiding loading the gemfile twice (#2951, #2952, @segiddins)
  Features:
  - add support for using version operators to specify ruby versions in the Gemfile (@jtarchie)
  - redirect `--help` flag for plugins to that plugin's man page (@RochesterinNYC)
  - support probing a mirror with a fallback timeout (#4128, @pcarranza)
  - add `--full-index` option to `bundle lock` (@segiddins)
  - support running with frozen string literals (@deepj, @segiddins)
  - add `--major` and `--minor` options to `bundle outdated` (#3805, @cirdes)
  - allow passing a custom `ui` to `bundler/inline` (@lamont-granquist)
  - add support for ruby 2.4 (#4266, @segiddins)
  - add `bundle outdated --parseable` for machine-readable output (@RochesterinNYC)
  Bugfixes:
  - fix `bundle package --all` recursing endlessly (#4158, @RochesterinNYC)
  - fail fast on more errors when fetching remote resources (#4154, @RochesterinNYC)
  - give a better error message when a given git commit can't be found (#4140, @doy)
  - give a better error message when `bundle clean` doesn't have sufficient permissions (#4170, @RochesterinNYC)
  - give a better error message when reading a bundler config file fails (@segiddins)
  - restrict platforms when referencing a `gemspec` in the `Gemfile` to those defined in the gemspec (#4102, #4150, @smellsblue)
  - fix `bundle gem` with minitest to use the correct rake task (@kotoshenya)
  - give a better error message when ssl isn't available (#4054, @RochesterinNYC)
  - print the original `require` error when `Bundler.require` fails (#4182, @RochesterinNYC)
  - give a better error message when certain resources are temporarily unavailable (#4183, @RochesterinNYC)
  - fix returning case-sensitive gem mirror URIs on ruby 2.3 (@segiddins)
  - ignore colorized output from `git` when determining the current branch (#4056, @agis-)
  - fix storing the shared gems config option as a boolean (@vassilevsky)
  - add support for running `bundle gem --exe` instead of using the `--bin` option (@christhekeele)
  - fix `exec`-ing with 0 args in a directory with spaces (#4230, @segiddins)
  - avoid installing extraneous gems when resolving to an older version of a spec (#4101, #4198, @segiddins)
  - ensure paths resolved when parsing a gemfile are relative to that file (#3349, @dtognazzini)
  - give a better error message when encountering an invalid gemspec (#4248, #4275, @RochesterinNYC)
  - preserve the original `PATH` in `Bundler.with_clean_env` (#4251, @segiddins)
  - ensure standalone file paths are relative to the project root (#4144, @glennpratt)</changelog>
  <changelog author="coolo@suse.com" date="1464177600">- simplify gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1464264000">- updated to version 1.12.5
  see installed CHANGELOG.md
  [#]# 1.12.5 (2016-05-25)
  Bugfixes:
  - only take over `--help` on `bundle exec` when the first two arguments are `exec` and `--help` (#4596, @segiddins)
  - don't require `require: true` dependencies that are excluded via `env` or `install_if` (@BrianHawley)
  - reduce the number of threads used simultaneously by bundler (#4367, @will-in-wi)</changelog>
  <changelog author="coolo@suse.com" date="1475928000">- updated to version 1.13.2
  see installed CHANGELOG.md
  [#]# 1.13.2 (2016-09-30)
  Bugfixes:
  - allow `Settings` to be initialized without a root directory (@m1k3)
  - allow specifying ruby engines in the gemfile as a symbol (#4919, @JuanitoFatas)
  - avoid an execption when using `bundler/deployment` with Vlad (@srbaker)
  - ensure redefined methods have the same visibility as the one they're replacing, fixing `Kernel.require` failing on JRuby (#4975, @segiddins)
  - ensure that Bundler won't complain about a corrupt lockfile when no lockfile exists when using `gemspec` in the Gemfile (#5006, @segiddins)
  - fail gracefully when parsing the metadata for a gemspec from the compact index fails (@segiddins)
  - fix invoking bundler with binstubs generated by RubyGems 2.6.2+ (#4974, @chrismo)
  Performance:
  - avoid parsing the lockfile twice when evaluating gemfiles (@segiddins)
  [#]# 1.13.1 (2016-09-13)
  Bugfixes:
  - ensure that `Gem::Source` is available, fixing several exceptions (#4944, @dekellum)
  - ensure that dependency resolution works when multiple gems have the same dependency (#4961, @segiddins)
  [#]# 1.13.0 (2016-09-05)
  This space deliberately left blank.
  [#]# 1.13.0.rc.2 (2016-08-21)
  Features:
  - add setting `exec_disable_load` to force `exec` to spawn a new Ruby process (@segiddins)
  - add `doctor` command to help with issues like unlinked compiled gems (#4765, @mistydemeo)
  - rework the `update` command, providing fine-grained control via flags (#4676, @chrismo)
  - add URI to http response output in debug mode (#4808, @NickLaMuro)
  - add manpage for `binstubs` command (#4847, @Zorbash)
  - support `mirror` settings for sources by hostname, not only full URL (@opiethehokie)
  - print gem installation errors after other install output (#4834, @segiddins)
  - add `lock --remove-platform` flag to remove platforms from the lock (#4877, @segiddins)
  - add `only_update_to_newer_versions` setting to prevent downgrades during `update` (@segiddins)
  - expanded expirimental plugin support to include hooks and sources (@asutoshpalai)
  Bugfixes:
  - retry gem downloads (#4846, @jkeiser)
  - improve the CompactIndex to handle capitalized legacy gems (#4867, @segiddins)
  - re-use persistent HTTP connections for CompactIndex (@NickLaMuro)
  - respect `required_ruby_version` when Gemfile contains `ruby` version (@indirect)
  - allow `rake release` to sign git tags (#4743, @eagletmt)
  - set process titles when using `#load` during `exec` (@yob)
  - recognize JRuby shebangs for using `#load` during `exec` (@ojab)
  - handle world-writable home directories (#4726, @allenzhao)
  - support multi-platform gems via the `gemspec` Gemfile method (#4798, @segiddins)
  - print dots correctly for CompactIndex fetcher (@NickLaMuro)
  - set an `open_timeout` when requesting gem data via HTTP (@NickLaMuro)
  - rename the BUNDLE\_ORIG\_ENV variable so it no longer shows up in `config` (@indirect)
  - show help only when `-h` or `--help` is passed to Bundler, not to `exec` (#4801, @segiddins)
  - handle symlinks to binstubs created by `--standalone` (#4782, @terinjokes)
  [#]# 1.13.0.rc.1 (2016-06-27)
  Features:
  - when `bundle config major_deprecations` or `BUNDLE_MAJOR_DEPRECATIONS` is set, deprecation warnings for bundler 2 will be printed (@segiddins)
  - when running with `--verbose`, bundler will print the reason it is re-resolving a gemfile (@segiddins)
  Bugfixes:
  - fix support for running RubyGems 1.x on Ruby 2.3 (#4698, @segiddins)
  - fix bundle exec'ing to a ruby file when gems are installed into a path (#4592, @chrismo)
  - when multiple specs in a bundle have the same executable, prefer activating the one from the requested gem (#4705, @segiddins)
  - stop changing the load path to require the vendored postit when trampolining (@segiddins)
  - ensure relative paths are properly printed after completing an installation (@jenseng)
  - fix re-resolving when there are multiple unchanged path sources (@segiddins)
  - de-init submodules when running git 2.9 and requesting a git gem without submodules (@segiddins)
  [#]# 1.13.0.pre.1 (2016-06-20)
  Performance:
  - speed up gemfile resolution during `bundle install` by between 4x-100x (#4376, @segiddins)
  - generally reduce object allocations when using bundler (@segiddins)
  - speed up bin generation for path gems with many files (#2846, @segiddins)
  - fix detecting path spec changes to avoid re-resolving unnecessarily (@jrafanie)
  Features:
  - automatically trampoline to the bundler version locked in the lockfile, only updating to the running version on `bundle update --bundler` (@segiddins)
  - laying the groundwork for plugin support, which is currently unsuppported, undocumented, disabled by default, and liable to change without notice (@asutoshpalai)
  - allow `bundle viz --without` to accept multiple `:`-delimited groups (@mobilutz)
  - support for RubyGems 2.6.4 (#4368, @segiddins, @RochesterinNYC)
  - colorize updated gem versions (#4334, @bronzdoc)
  - add the `--standalone` flag to `bundle binstubs` (#4594, @b-ggs)
  - update the `bundle gem` CoC to contributor covenant v1.4 (@cllns)
  - use a custom YAML serializer to make config file consistent (@segiddins)
  - filter credentials from error messages (bundler/bundler-features#111, @RochesterinNYC, @sandlerr)
  - support relative paths used inside a nested invocation of `eval_gemfile` (#4584, @RochesterinNYC)
  - fail gracefully when attempting to install a yanked gem (#4344, @allenzhao)
  - automatically install an inline gemfile when gems are missing locally (@segiddins)
  - allow conflicts for gems resolved via `gemspec` (@segiddins)
  - add `--add-platform` option to `bundle lock` (@segiddins)
  - fail gracefully when a resolved spec's `required_ruby_version` or `required_rubygems_version` is incompatible (@segiddins)
  Bugfixes:
  - implicitly unlock the resolved ruby version when the declared requirements in the gemfile are incompatible with the locked version (#4595, #4627, @segiddins)
  - add support for quoted paths in `$PATH` (#4323, @segiddins)
  - check out missing git repos that are not being installed (#3981, @asutoshpalai)
  - write `bundler/setup.rb` to a consistent path (@glennpratt)
  - open editor in `bundle open` with a clean environment (@sj26)
  - resolve infinitely recursive copy when running `bundle package --all` with a `gemspec` in the gemfile (#4392, #4430, @RochesterinNYC)
  - fail gracefully when encountering an `Errno::ENOTSUP` (#4394, @segiddins)
  - fail gracefully when encountering an `Errno::EHOSTUNREACH` (#4642, @allenzhao)
  - fix loading config files with very long values (#4370, @segiddins)
  - only show potential updates for gemfile platforms in `bundle outdated` (#4450, @RochesterinNYC)
  - allow running `bundle install --deployment` after `bundle package --all` with path gems (#2175, @allenzhao)
  - add support for patchlevels in ruby versions in the gemfile and gemspecs (#4593, @chalkos)</changelog>
  <changelog author="coolo@suse.com" date="1477742400">- updated to version 1.13.6
  see installed CHANGELOG.md
  [#]# 1.13.6 (2016-10-22)
  Bugfixes:
  - make the `gem` method public again, fixing a regression in 1.13.4 (#5102, @segiddins)
  [#]# 1.13.5 (2016-10-15)
  Bugfixes:
  - Ensure a locked pre-release spec can always be re-resolved (#5089, @segiddins)
  [#]# 1.13.4 (2016-10-11)
  Bugfixes:
  - stop printing warning when compact index versions file is rewritten (#5064, @indirect)
  - fix `parent directory is world writable but not sticky` error on install (#5043, @indirect)
  - fix for `uninitialized constant Bundler::Plugin::API::Source` error (#5010, @hsbt, @aycabta)
  - make `update` options for major, minor, and patch updates consistent (#4934, @chrismo)
  [#]# 1.13.3 (2016-10-10)
  Bugfixes:
  - add support for weak etags to the new index (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1479038400">- update patch</changelog>
  <changelog author="coolo@suse.com" date="1487073600">- updated to version 1.14.4
  see installed CHANGELOG.md
  [#]# 1.14.4 (2017-02-12)
  Bugfixes:
  - fail gracefully when attempting to overwrite an existing directory with `bundle gem` (#5358, @nodo)
  - fix a resolver bug that would cause bundler to report conflicts that it could resolve (#5359, #5362, @segiddins)
  - set native extension build arguments for git gems (#5401, @segiddins)
  - fix the suggested `bundle lock` command printed when a dependency is unused on any platform (@5t111111)
  - ensure the version passed to `ruby` in the Gemfile is valid during Gemfile parsing (#5380, @segiddins)
  - show `bundle inject` usage when too many arguments are passed (#5384, @Shekharrajak)
  - stop `bundle show --outdated` from implicitly running `bundle update` (#5375, @colby-swandale)
  - allow the temporary home directory fallback to work for multiple users (@svoop)
  [#]# 1.14.3 (2017-01-24)
  Bugfixes:
  - fix the resolver attemting to activate ruby-platform gems when the bundle is only for other platforms (#5349, #5356, @segiddins)
  - avoid re-resolving a locked gemfile that uses `gemspec` and includes development dependencies (#5349, @segiddins)
  [#]# 1.14.2 (2017-01-22)
  Bugfixes:
  - fix using `force_ruby_platform` on windows (#5344, @segiddins)
  - fix an incorrect version conflict error when using `gemspec` on multiple platforms (#5340, @segiddins)
  [#]# 1.14.1 (2017-01-21)
  Bugfixes:
  - work around a ruby 2.2.2 bug that caused a stack consistency error during installation (#5342, @segiddins)
  [#]# 1.14.0 (2017-01-20)
  Bugfixes:
  - ensure `Settings::Mirror` is autoloaded under the `Settings` namespace
    (#5238, @segiddins)
  - fix `bundler/inline` when `BUNDLE_GEMFILE=""` (#5079, @segiddins)
  [#]# 1.14.0.pre.2 (2017-01-11)
  Bugfixes:
  - allow not selecting a gem when running `bundle open` (#5301, @segiddins)
  - support installing gems from git branches that contain shell metacharacters (#5295, @segiddins)
  - fix a resolver error that could leave dependencies unresolved (#5294, @segiddins)
  - fix a stack overflow error when invoking commands (#5296, @segiddins)
  [#]# 1.14.0.pre.1 (2016-12-29)
  Features:
  - `bundle doctor` first runs `bundle check` (@segiddins)
  - the bundler trampoline is automatically enabled when the target version is greater than bundler 2 (@segiddins)
  - gem checksums returned by rubygems.org are validated when installing gems (#4464, @segiddins)
  - use the git username as a github username when running `bundle gem` (@JuanitoFatas)
  - show more context when the resolver conflicts on required ruby and rubygems versions (@segiddins)
  - improve platform support by allowing bundler to pick the best platform match during dependency resolution, enabled with the `specific_platform` setting (#4295, #4896, @segiddins)
  - always prompt the user for a password when using `sudo` (#3006, @segiddins)
  - support running without a home directory (#4778, @segiddins)
  - print a warning when the gemfile uses a platform conditional that will exclude the gem from all lockfile platforms (@segiddins)
  - add the `force_ruby_platform` setting to force bundler to install ruby-platform gems, even on other platforms (#4813, @segiddins)
  - add conservative update options to `bundle lock` (#4912, @chrismo)
  - improve `bundle outdated` output to group gems by group (@ryanfox1985)
  - add conservative update options to `bundle update` (#5065, #5076, @chrismo)
  - print the output of `bundle env` as github-flavored markdown, making it easier to preserve formatting when copy-pasting into a new issue (@segiddins)
  - configure the persistence file when using `bundle gem` with `rspec` (@segiddins)
  - add support for the `ruby_25` gemfile filter (@amatsuda)
  - when installing with a lockfile that is missing dependencies, allow installation to proceed (but without parallelism) (@segiddins)
  Performance:
  - improve `require "bundler"` performance by ~5x (@segiddins)
  - allow install gems in parallel when running on rubygems 2+
  Bugfixes:
  - config files with CRLF line endings can be read (#4435, @segiddins)
  - `bundle lock` activates gems for the current platform even if they were activated under a different platform for a separate dependency (#4896, @segiddins)
  - running `bundle env` in a directory without a gemfile no longer crashes (@segiddins)
  - fail gracefully when attempting to use a source with an unknown URI scheme (#4953, @segiddins)
  - store paths in the lockfile relative to the root gemfile directory when using `eval_gemfile` (#4966, @segiddins)
  - `bundle lock` will not update without the `--update` flag (#4957, @segiddins)
  - the `console` binstub generated by `bundle gem` will load `.irbrc` files (@mattbrictson)
  - print friendly filesystem access errors in the new index (@segiddins)
  - print a helpful error when running out of memory on jruby (#4673, @segiddins)
  - load all rubygems plugins when installing gems (#2824, @segiddins)
  - `bundle clean --dry-run` prints the list of gems without the `--force` option when no path is set (#5027, @hmistry)
  - local installs no longer print "this gem may have been yanked" (#5022, @hmistry)
  - avoid leaking `which` output when running `bundle doctor` (@colby-swandale)
  - print a warning when attempting to `bundle exec` an empty program (#5084, @bronzdoc)
  - ensure `bundle outdated` lists all outdated gems (#4979, @chrismo)
  - fail gracefully when attempting to `bundle gem` with an invalid constant name (#5185, @segiddins)
  - allow `bundler/inline` to work in a directory that contains a gemfile (#5117, @colby-swandale)
  - ensure that the new index is thread-safe, allowing installation on rbx (#5142, @segiddins)
  - remove deprecated `rspec` syntax in `bundle gem` output (@gearnode)
  - fail gracefully when any system error is encountered when touching the filesystem (#5134, @segiddins)
  - fix compatibility with a machine running with FIPS mode enabled (#4989, @segiddins)
  - fix `bundle lock --add-platform ruby` (#5230, @segiddins)
  - print gem post-install messages when running `bundle update` (@smathy)
  - ensure errors due to a retries are all separated by a newline (@segiddins)
  - print out the bundle path in gem not found errors (#4854, @diegosteiner)
  - fail gracefully when creating threads fails (@segiddins)
  - avoid downloading metadata for gems that are only development dependencies (@Paxa)
  [#]# 1.13.7 (2016-12-25)
  Features:
  - add support for the `ruby_24` gemfile filter (#5281, @amatsuda)</changelog>
  <changelog author="coolo@suse.com" date="1489665600">- updated to version 1.14.6
  see installed CHANGELOG.md
  [#]# 1.14.6 (2017-03-03)
  Bugfixes:
  - avoid undefined constant `Bundler::Plugin::API::Source` exception (#5409, @segiddins)
  - avoid incorrect warnings about needing to enable `specific_platform` (@segiddins)
  - fail gracefully when the compact index does not send an ETag (#5463, @olleolleolle)
  - ensure `bundle outdated --local` shows all outdated gems (#5430, @denniss)
  - fix a case where ruby version requirements could lead to incorrect resolver conflicts (#5425, @segiddins)
  [#]# 1.14.5 (2017-02-22)
  Bugfixes:
  - avoid loading all unused gemspecs during `bundle exec` on RubyGems 2.3+ (@segiddins)
  - improve resolver performance when dependencies have zero or one total possibilities ignoring requirements (#5444, #5457, @segiddins)
  - enable compact index when OpenSSL FIPS mode is enabled but not active (#5433, @wjordan)
  - use github username instead of git name for the github url in `bundle gem` (#5438, @danielpclark)
  - avoid a TypeError on RubyGems 2.6.8 when no build settings are set for native extensions (@okkez)
  - fail gracefully when the dependency api is missing runtime dependencies for a gem (@segiddins)
  - handle when a platform-specific gem has more dependencies than the ruby platform version (#5339, #5426, @segiddins)
  - allow running bundler on a machine with no home directory where the temporary directory is not writable (#5371, @segiddins)
  - avoid gem version conflicts on openssl using Ruby 2.5 (#5235, @rhenium)
  - fail when installing in frozen mode and the dependencies for `gemspec` gems have changed without the lockfile being updated (#5264, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1489665601">- fix gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1495540800">- updated to version 1.15.0
  see installed CHANGELOG.md
  [#]# 1.15.0 (2017-05-19)
  This space intentionally left blank.
  [#]# 1.15.0.pre.4 (2017-05-10)
  Bugfixes:
  - avoid conflicts when `Gem.finish_resolve` is called after the bundle has been set up (@segiddins)
  - ensure that `Gem::Specification.find_by_name` always returns an object that can have `#to_spec` called on it (#5592, @jules2689)
  [#]# 1.15.0.pre.3 (2017-04-30)
  Bugfixes:
  - avoid redundant blank lines in the readme generated by `bundle gem` (@koic)
  - ensure that `open-uri` is not loaded after `bundle exec` (@segiddins)
  - print a helpful error message when an activated default gem conflicts with
    a gem in the gemfile (@segiddins)
  - only shorten `ref` option for git gems when it is a SHA (#5620, @segiddins)
  [#]# 1.15.0.pre.2 (2017-04-23)
  Bugfixes:
  - ensure pre-existing fit caches are updated from remote sources (#5423, @alextaylor000)
  - avoid duplicating specs in the lockfile after updating with the gem uninstalled (#5599, @segiddins)
  - ensure git gems have their extensions available at runtime (#5594, @jules2689, @segiddins)
  [#]# 1.15.0.pre.1 (2017-04-16)
  Features:
  - print a notification when a newer version of bundler is available (#4683, @segiddins)
  - add man pages for all bundler commands (#4988, @feministy)
  - add the `bundle info` command (@fredrb, @colby-swandale)
  - all files created with `bundle gem` comply with the bundler style guide (@zachahn)
  - if installing a gem fails, print out the reason the gem needed to be installed (#5078, @segiddins)
  - allow setting `gem.push_key` to set the key used when running `rake release` (@DTrierweiler)
  - print gem versions that are regressing during `bundle update` in yellow (#5506, @brchristian)
  - avoid printing extraneous dependencies when the resolver encounters a conflict (@segiddins)
  - add the `bundle issue` command that prints instructions for reporting issues (#4871, @jonathanpike)
  - add `--source` and `--group` options to the `bundle inject` command (#5452, @Shekharrajak)
  - add the `bundle add` command to add a gem to the gemfile (@denniss)
  - add the `bundle pristine` command to re-install gems from cached `.gem` files (#4509, @denniss)
  - add a `--parseable` option for `bundle config` (@JuanitoFatas, @colby-swandale)
  Performance:
  - speed up gemfile initialization by storing locked dependencies as a hash (@jules2689)
  - speed up gemfile initialization by making locked dependency comparison lazy, avoiding object allocation (@jules2689)
  - only validate git gems when they are downloaded, instead of every time `Bundler.setup` is run (@segiddins)
  - avoid regenerating the lockfile when nothing has changed (@segiddins)
  - avoid diffing large arrays when no sources in the gemfile have changed (@segiddins)
  - avoid evaluating full gemspecs when running with RubyGems 2.5+ (@segiddins)
  Bugfixes:
  - fix cases where `bundle update` would print a resolver conflict instead of updating the selected gems (#5031, #5095, @segiddins)
  - print out a stack trace after an interrupt when running in debug mode (@segiddins)
  - print out when bundler starts fetching a gem from a remote server (@segiddins)
  - fix `bundle gem` failing when `git` is unavailable (#5458, @Shekharrajak, @colby-swandale)
  - suggest the appropriate command to unfreeze a bundle (#5009, @denniss)
  - ensure nested calls to `bundle exec` resolve default gems correctly (#5500, @segiddins)
  - ensure that a plugin failing to install doesn't uninstall other plugins (@kerrizor, @roseaboveit)
  - ensure `socket` is required before being referenced (#5533, @rafaelfranca)
  - allow running `bundle outdated` when gems aren't installed locally (#5553, @segiddins)
  - print a helpful error when `bundle exec`ing to a gem that isn't included in the bundle (#5487, @segiddins)
  - print an error message when a non-git gem is given a `branch` option (#5530, @colby-swandale)
  - allow interrupts to exit the process after gems have been installed (@segiddins)
  - print the underlying error when downloading gem metadata fails (#5579, @segiddins)
  - avoid deadlocking when installing with a lockfile that is missing dependencies (#5378, #5480, #5519, #5526, #5529, #5549, #5572, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1497614400">- update to 1.15.1
  - Bugfixes:
  - `bundle lock --update GEM` will fail gracefully when the gem
    is not in the lockfile (#5693, @segiddins)
  - `bundle init --gemspec` will fail gracefully when the gemspec
    is invalid (@colby-swandale)
  - `bundle install --force` works when the gemfile contains git
    gems (#5678, @segiddins)
  - `bundle env` will print well-formed markdown when there are
    no settings (#5677, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552000">- update to 1.15.2
  - Features:
  - new gemfiles created by bundler will include an explicit
    `github` git source that uses `https` (@segiddins)
  - Bugfixes:
  - inline gemfiles work when `BUNDLE_BIN` is set (#5847,
    @segiddins)
  - avoid using the old dependency API when there are no changes
    to the compact index files (#5373, @greysteil)
  - fail gracefully when the full index serves gemspecs with
    invalid dependencies (#5797, @segiddins)
  - support installing gemfiles that use `eval_gemfile`, `:path`
    gems with relative paths, and `--deployment` simultaneously
    (@NickLaMuro)
  - `bundle config` will print settings as the type they are
    interpreted as (@segiddins)
  - respect the `no_proxy` environment variable when making
    network requests (#5781, @jakauppila)
  - commands invoked with `--verbose` will not have default flags
    printed (@segiddins)
  - allow `bundle viz` to work when another gem has a requirable
    `grapviz` file (#5707, @segiddins)
  - ensure bundler puts activated gems on the `$LOAD_PATH` in a
    consistent order (#5696, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552001">- switch to already patched gem file until we figure out how to
  handle the slightly different gem spec --ruby output on TW</changelog>
  <changelog author="coolo@suse.com" date="1501761600">- updated to version 1.15.3
  see installed CHANGELOG.md
  [#]# 1.15.3 (2017-07-21)
  Bugfixes:
  - ensure that empty strings passed to `bundle config` are serialized &amp; parsed properly (#5881, @segiddins)
  - avoid printing an outdated version warning when running a parseable command (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1504440000">- updated to version 1.15.4
  see installed CHANGELOG.md
  [#]# 1.15.4 (2017-08-19)
  Bugfixes:
  - handle file conflicts gracefully in `bundle gem` (@rafaelfranca, @segiddins)
  - bundler will fail gracefully when the bundle path contains the system path separator (#5485, ajwann)
  - failed gem downloads will be retried consistently across different RubyGems versions (@shayonj)
  - `bundle pristine` will respect build options while re-building native extensions (@NickLaMuro)</changelog>
  <changelog author="coolo@suse.com" date="1512302400">- updated to version 1.16.0
  see installed CHANGELOG.md
  [#]# 1.16.0 (2017-10-31)
  Bugfixes:
  - avoid new RubyGems warning about unsafe YAML loading (to keep output consistent) (@segiddins)
  - load digest subclasses in a thread-safe manner (@segiddins, @colby-swandale)
  - avoid unusued variable warnings under ruby 2.5 (@amatsuda)
  - fix printing the same message twice in verbose mode ([#6028](https://github.com/bundler/bundler/issues/6028), @akhramov)
  - allow `SignalException`s to bubble up to the interpreter during `bundle exec` ([#6090](https://github.com/bundler/bundler/issues/6090), @dekellum)
  - avoid activating stdlib digest under Ruby 2.5 (@segiddins)
  - prioritise explicitly requested gems in dependency resolution sort order (@segiddins)
  - reduce memory usage during dependency resolution ([#6114](https://github.com/bundler/bundler/issues/6114), @greysteil)
  - ensure that the default bundler gem is not accidentally activated on ruby 2.5 when using local git overrides (@segiddins)
  [#]# 1.16.0.pre.3 (2017-10-04)
  Features:
  - the output from `bundle env` includes more information, particularly both the compiled &amp; loaded versions of OpenSSL (@indirect)
  Bugfixes:
  - fix a bug where installing on FreeBSD would accidentally raise an error (#6013, @olleolleolle)
  - fix a regression in 1.16 where pre-release gems could accidentally be resolved even when the gemfile contained no pre-release requirements (@greysteil)
  - bundler will avoid making unnecessary network requests to fetch dependency data, fixing a regression introduced in 1.16 (@segiddins)
  - the outdated bundler version message is disabled by default until the message has been fine-tuned (#6004, @segiddins)
  [#]# 1.16.0.pre.2 (2017-09-06)
  Bugfixes:
  - handle when a connection is missing a socket when warning about OpenSSL version (@greysteil)
  - the description for the `rake release` task now reflects `$RUBYGEMS_HOST` (@wadetandy)
  - fix a bug where `bundle update` would regress transitive dependencies (@greysteil)
  [#]# 1.16.0.pre.1 (2017-09-04)
  Features:
  - allow using non-branch symbolic refs in a git source (#4845, @segiddins)
  - allow absolute paths in the `cache path` setting (#5627, @mal)
  - gems created via `bundle gem` with rspec have `--require spec_helper` in their `.rspec` file (@koic)
  - `bundle env` includes `Gem.ruby` and the `bundle` binstub shebang when they don't match (#5616, @segiddins)
  - allow passing gem names to `bundle pristine` (@segiddins)
  - `bundle version` and `bundle env` include the commit and build date for the bundler gem (#5049, @segiddins)
  - add the `--shebang` option to `bundle binstubs` (#4070, @segiddins, @Zorbash)
  - gemfiles are `eval`ed one fewer time when running `bundle install` (#4952, #3096, #4417, @segiddins)
  - the `fileutils` gem is now vendored so different versions of the gem can be activated (@segiddins)
  - speed up no-op installations (#5842, @segiddins)
  - default to keeping the lockfile in the default gem template (@deivid-rodriguez)
  - add a special bundler binstub that ensures the correct version of bundler is activated (#5876, @segiddins)
  - speed up dependency resolution and ensure that all resolvable gemfiles can be installed (@segiddins, @greysteil)
  - add a `bundle list` command that prints the gems in use (#4754, @colby-swandale)
  - allow adding credentials to a gem source during deployment when `allow_deployment_source_credential_changes` is set (@adrian-gomez)
  - making an outdated (and insecure) TLS connection to rubygems.org will print a warning (@segiddins)
  Bugfixes:
  - allow configuring a mirror fallback timeout without a trailing slash (#4830, @segiddins)
  - fix handling of mirrors for file: urls that contain upper-case characters (@segiddins)
  - list the correct gem host for `rake release` when `allowed_push_host` has been set (@mdeering)
  - ensure `Bundler.original_env` preserves all env keys that bundler sets (#5700, @segiddins)
  - ensure `bundle pristine` removes files added to a git gem (@segiddins)
  - load plugin files from path gems before gem installation (#5429, @segiddins)
  - ensure gems containing manpages are properly set up (#5730, @segiddins)
  - avoid fetching remote specs when all effected gems are in groups that are not being installed (@segiddins)
  - allow `BUNDLE_GEMFILE` to be a relative path (#5712, @gxespino)
  - show a more helpful error message when a gem fails to install due to a corrupted lockfile (#5846, @segiddins)
  - add a process lock to allow multiple concurrent `bundle install`s (#5851, @stefansedich)
  - ensure that specifications always return an array for `#extensions` (@greysteil)
  - print a helpful error message when using a gem in the Gemfile with an empty name (@colby-swandale)
  - ensure that all gemfiles are included in `bundle env` (@segiddins)
  - use ssl client cert and ca cert settings from gem configuration as fallbacks (@stan3)
  - avoid global namespace pollution when loading gems (#5958, @shyouhei)
  - avoid running a complete re-resolve on `bundle update --bundler` (@segiddins)
  - allow `bundle binstubs --standalone` to work without `path` being set (@colby-swandale)
  - fix support for bundle paths that include jars or wars on jruby (#5975, @torcido)</changelog>
  <changelog author="coolo@suse.com" date="1515499200">- updated to version 1.16.1
  see installed CHANGELOG.md
  [#]# 1.16.1 (2017-12-12)
  Bugfixes:
  - avoid hanging on complex resolver errors ([#6114](https://github.com/bundler/bundler/issues/6114), @halfbyte)
  - avoid an error when running `bundle update --group` ([#6156](https://github.com/bundler/bundler/issues/6156), @mattbrictson)
  - ensure the resolver prefers non-pre-release gems when possible ([#6181](https://github.com/bundler/bundler/issues/6181), @greysteil)
  - include bundler's gemspec in the built gem ([#6165](https://github.com/bundler/bundler/issues/6165), @dr-itz)
  - ensure locally installed specs are not overriden by those in remote sources during dependency resolution ([#6072](https://github.com/bundler/bundler/issues/6072), @indirect)
  - ensure custom gemfiles are respected in generated binstubs (@pftg)
  - fail gracefully when loading a bundler-generated binstub when `bin/bundle` was not generated by bundler ([#6149](https://github.com/bundler/bundler/issues/6149), @hsbt)
  - allow `bundle init` to be run even when a parent directory contains a gemfile ([#6205](https://github.com/bundler/bundler/issues/6205), @colby-swandale)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1590494400">- added https://patch-diff.githubusercontent.com/raw/rubygems/bundler/pull/7416.patch
  VUL-0: CVE-2019-3881: rubygem-bundler: Insecure permissions on
  directory in /tmp/ allows malicious code execution (boo#1143436)</changelog>
</package>
<package pkgid="67a64b07251099ad43550bd2013eb3a3db9fd3b15ec45754a0822856b8741e62" name="rubygem-bundler" arch="src">
  <version epoch="0" ver="1.16.1" rel="lp152.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1451995200">- update to version 1.11.2
  - _really_ stop calling `required_ruby_version` on nil
    @specifications (#4147, @indirect)
- update to version 1.11.1
  - lazy-load Psych, again (#4149, @indirect)
  - allow gemspec gems on other platforms (#4150, @indirect)
  - fix --no-coc and --no-mit flags on `gem` (#4148,
    @RochesterinNYC)
  - stop calling `required_ruby_version` on nil @specifications
    (#4147, @indirect)
- update to version 1.11.0
  - fail gracefully when trying to execute a non-executable file
    (#4081, @fotanus)
  - fix a crash when pushing a gem via `rake release` (@segiddins)
  - actual Gemfile and lockfile filenames are used in messages
    (#3672, @segiddins)
  - the git remote for `rake release` is now customizable
    (@skateman)
  - file access permissions errors are now much more friendly
    (#3703, #3735, #3858, #3988, #4009 @repinel, @Elffers,
    @segiddins, @agis-)
  - add support for showing help for plugin commands (@tf)
  - send `X-Gemfile-Source` header to source mirrors (@agis-)
  - show what version upstream dependencies were resolved to in
    conflict messages (@segiddins)
  - add support for using bundler setting to add private access
    credentials for git sources (@frsyuki)
  - take into consideration HTTP proxy settings in `.gemrc`
    (@PG-kura)
  - allow specifying a gem host to push to in the `GEM_HOST`
    environment variable (@pmenglund)
  - when gempec `required_ruby_version` is available and the
    Gemfile specifies a ruby version, resolve for the given ruby
    version (@segiddins)
  - allow setting a `silence_root_warning` setting to silence the
    warning when `bundle install` is run as root (@blackxored)
  - update the `bundle gem` code of conduct template to Contributor
    Covenant v1.3.0 (@CoralineAda)
  - add support for specifying gems to update when running `bundle
    lock` via `--update gem1 gem2` (@JuanitoFatas)
  - added support for MRI 2.3 (@amatsuda)
  - show a helpful message when requiring a file in `bundler
    require` fails (#3960, @agis-)
  - include git revision hash when printing a git source (#3433,
    @agis-)
  - improve hint when a resolution conflict occurs (@seanlinsley)
  - show a friendly error when a git ref is not found (#3879,
    @agis-)
  - improve error message when sources are not absolute URIs
    (#3925, @agis-)
  - add `pkg` to rake's clobber list (#3676, @jasonkarns)
  - retry fetching specs when fetching version metadata fails
    (@jingweno)
  - avoid showing bundler version warning messages twice (@fotanus)
  - fix running `bundle check` with `--path` when the gems are only
    installed globally (@akihiro17)
  - fix `bin/setup` from `bundle gem` assuming `bash` is in `/bin`
  - fail more gracefully when an HTTP remote is unreachable (#3765,
    @steverob)
  - fix a warning running `bundle exec` on jruby 9.0.0.0
    (@deivid-rodriguez, @mastfish)
  - fix the `bundle gem` readme when no tests are generated
    (@roseweixel)
  - the dependencies on test gems in `bundle gem` are now locked to
    major versions (#3811, @indirect)
  - fix the paths for native extensions generated by `--standalone`
    (#3813, @AlexanderPavlenko)
  - fix trying to cache a gem that has no source (@EduardoBautista)
  - fix `--source` option to `bundle update` causing incorrect gem
    unlocking (#3759, #3761, @neoeno)
  - fix handling an empty `BUNDLE_GEMFILE` environment variables
    (#3678, @agis-)
  - avoid cleaning up gem extension directory in `bundle clean`
    (@Sirupsen)
  - fix the `ssl_verify_mode` setting not being treated as a number
    (@goughy000)
  - fix not retrying on zlib errors (#4047, @andremedeiros)
  - fix a warning being shown for using `URI.encode`
    (@EduardoBautista)
  - fix handling of fatal HTTP errors (#3830, @indirect)
  - ensure all `sudo` access is done in a thread-safe manner
    (#3910, @agis-)
  - fix caching gems with a path with the same prefix as the
    bundled application (@indirect)
  - fix showing gemspec validation errors on `bundle exec` (#3895,
    @agis-)
  - distinguish Gemfile syntax and evaluation errors (#3783,
    @agis-)
  - fix nested Gemfile sources not restoring the previous source
    (#3974, @agis-)
  - fix the `RUBYLIB` environment variable not being cleaned
    (#3982, @agis-)
  - fix handling a dependency missing from `Gemfile.lock` so
    parallel installation does not deadlock (#4012, @lukaso)
  - also print gemspecs in `bundle env` output (@agis-)
  - fix handling when a `path` source does not have a gemspec but a
    lockfile says there is (#4004, @segiddins)
  - show a warning when the `RUBYGEMS_GEMDEPS` environment variable
    is set (#3656, @agis-)
  - fix handling invalid RubyGems configuration files (#4042,
    @agis-)
  - fix `bundle console` falling back to `irb` when the preferred
    console is unavailable (@felixbuenemann)
  - restrict platforms when referencing a `gemspec` in the
    `Gemfile` to those defined in the gemspec (#4102, @smellsblue)
  - speed up dependency resolution in pathological cases by 25x
    (#3803, @segiddins)
  - drop string allocations when searching for gems (@jrafanie)
- refreshed gemspec_remove_pem.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1458734400">- Force fixed timestamps for patched gems (bsc#916047)</changelog>
  <changelog author="coolo@suse.com" date="1463832000">- updated to version 1.12.4
  see installed CHANGELOG.md
  [#]# 1.12.4 (2016-05-16)
  Bugfixes:
  - ensure concurrent use of the new index can't corrupt the cache (#4519, @domcleal)
  - allow missing rubygems credentials when pushing a gem with a custom host (#4437, @Cohen-Carlisle)
  - fix installing built-in specs with `--standalone` (#4557, @segiddins)
  - fix `bundle show` when a gem has a prerelease version that includes a `-` (#4385, @segiddins)
  [#]# 1.12.3 (2016-05-06)
  Bugfixes:
  - fix uncoditionally writing `.bundle/config` when running `bundle install` (@segiddins)
  - fall back to the dependency API and the full index when the home directory is not writable (@segiddins)
  [#]# 1.12.2 (2016-05-04)
  Bugfixes:
  - fix modifying a frozen string when the resolver conflicts on dependencies with requirements (#4520, @grzuy)
  - fix `bundle exec foo --help` not showing the invoked command's help (#4480, @b-ggs)
  [#]# 1.12.1 (2016-04-30)
  Bugfixes:
  - automatically fallback when the new index has a checksum mismatch instead of erroring (@segiddins)
  - fix computation of new index file local checksums on Windows (#4472, @mwrock)
  - properly handle certain resolver backtracking cases without erroring (@segiddins, #4484)
  - ensure the `$LOAD_PATH` contains specs' load paths in the correct order (@segiddins, #4482)
  [#]# 1.12.0 (2016-04-28)
  This space intentionally left blank.
  [#]# 1.12.0.rc.4 (2016-04-21)
  Bugfixes:
  - don't fail when `bundle outdated` is run with flags and the lockfile contains non-semver versions (#4438, @RochesterinNYC)
  [#]# 1.12.0.rc.3 (2016-04-19)
  Bugfixes:
  - don't allow new attributes to dirty a lockfile when running `bundle exec`, `-rbundler/setup`, or `bundle check` (@segiddins)
  [#]# 1.12.0.rc.2 (2016-04-15)
  Features:
  - `bundle outdated` handles all combinations of `--major`, `--minor`, and `--patch` (#4396, @RochesterinNYC)
  Bugfixes:
  - prevent endless recursive copy for `bundle package --all` (#4392, @RochesterinNYC)
  - allow executables that are `load`ed to exit non-0 via an `at_exit` hook when invoked by `bundle exec` (@segiddins)
  - nested invocations of `bundle exec` properly preserve the `$PATH` and `$GEM_PATH` environment variables (@segiddins)
  [#]# 1.12.0.rc (2016-03-13)
  Performance:
  - Download gem metadata from globally distributed CDN endpoints (#4358, @segiddins)
  Bugfixes:
  - handle Ruby pre-releases built from source (#4324, @RochesterinNYC)
  - support binstubs from RubyGems 2.6 (#4341, @segiddins)
  - handle quotes present in in PATH (#4326, @segiddins)
  [#]# 1.12.0.pre.2 (2016-02-26)
  Performance:
  - speed up `bundle exec` by `load`ing the executable whenever possible, saving roughly .2 seconds per invocation (@segiddins)
  Features:
  - add a `--patch` flag for `bundle outdated` (@RochesterinNYC)
  - add `Bundler.clean_env` and `Bundler.original_env` (#4232, @njam)
  - add `--frozen` support to `bundle package` (#3356, @RochesterinNYC)
  Bugfixes:
  - place bundler loaded gems after `-I` and `RUBYLIB` (@Elffers)
  - give a better error message when filesystem access raises an `EPROTO` error (#3581, #3932, #4163, @RochesterinNYC)
  - give a better error message when both `--deployment` and `--system` are used together (@RochesterinNYC)
  - fix `$PATH` being preserved for use in `Bundler.with_clean_env` (#4251, @segiddins, @njam)
  - give a better error message when running `bundle outdated` in frozen mode (#4287, @RochesterinNYC)
  - handle when `http_proxy` is set to `:no_proxy` in the rubygems configuration (#4294, @segiddins)
  - give a better error message when authentication details aren't properly escaped (#4288, @RochesterinNYC)
  - fix `bundle outdated --minor` to only report updates that match the current minor version (@RochesterinNYC)
  - fix extra dependencies being resolved unnecessarily (#4276, @segiddins)
  - give a better error message when missing specs due to platform mis-matches (#4259, @RochesterinNYC)
  - skip rebuilding extensions for git gems if they are already built (#4082, @csfrancis, @indirect, @segiddins)
  - fix `bundle install` not installing when the `no_install` setting is set (#3966, @chulkilee, @segiddins)
  [#]# 1.12.0.pre.1 (2016-02-09)
  Performance:
  - speed up `bundle install` and `bundle update` by using the new compact gem index (@segiddins, @fotanus, @indirect)
  - speed up `bundle exec` by avoiding loading the gemfile twice (#2951, #2952, @segiddins)
  Features:
  - add support for using version operators to specify ruby versions in the Gemfile (@jtarchie)
  - redirect `--help` flag for plugins to that plugin's man page (@RochesterinNYC)
  - support probing a mirror with a fallback timeout (#4128, @pcarranza)
  - add `--full-index` option to `bundle lock` (@segiddins)
  - support running with frozen string literals (@deepj, @segiddins)
  - add `--major` and `--minor` options to `bundle outdated` (#3805, @cirdes)
  - allow passing a custom `ui` to `bundler/inline` (@lamont-granquist)
  - add support for ruby 2.4 (#4266, @segiddins)
  - add `bundle outdated --parseable` for machine-readable output (@RochesterinNYC)
  Bugfixes:
  - fix `bundle package --all` recursing endlessly (#4158, @RochesterinNYC)
  - fail fast on more errors when fetching remote resources (#4154, @RochesterinNYC)
  - give a better error message when a given git commit can't be found (#4140, @doy)
  - give a better error message when `bundle clean` doesn't have sufficient permissions (#4170, @RochesterinNYC)
  - give a better error message when reading a bundler config file fails (@segiddins)
  - restrict platforms when referencing a `gemspec` in the `Gemfile` to those defined in the gemspec (#4102, #4150, @smellsblue)
  - fix `bundle gem` with minitest to use the correct rake task (@kotoshenya)
  - give a better error message when ssl isn't available (#4054, @RochesterinNYC)
  - print the original `require` error when `Bundler.require` fails (#4182, @RochesterinNYC)
  - give a better error message when certain resources are temporarily unavailable (#4183, @RochesterinNYC)
  - fix returning case-sensitive gem mirror URIs on ruby 2.3 (@segiddins)
  - ignore colorized output from `git` when determining the current branch (#4056, @agis-)
  - fix storing the shared gems config option as a boolean (@vassilevsky)
  - add support for running `bundle gem --exe` instead of using the `--bin` option (@christhekeele)
  - fix `exec`-ing with 0 args in a directory with spaces (#4230, @segiddins)
  - avoid installing extraneous gems when resolving to an older version of a spec (#4101, #4198, @segiddins)
  - ensure paths resolved when parsing a gemfile are relative to that file (#3349, @dtognazzini)
  - give a better error message when encountering an invalid gemspec (#4248, #4275, @RochesterinNYC)
  - preserve the original `PATH` in `Bundler.with_clean_env` (#4251, @segiddins)
  - ensure standalone file paths are relative to the project root (#4144, @glennpratt)</changelog>
  <changelog author="coolo@suse.com" date="1464177600">- simplify gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1464264000">- updated to version 1.12.5
  see installed CHANGELOG.md
  [#]# 1.12.5 (2016-05-25)
  Bugfixes:
  - only take over `--help` on `bundle exec` when the first two arguments are `exec` and `--help` (#4596, @segiddins)
  - don't require `require: true` dependencies that are excluded via `env` or `install_if` (@BrianHawley)
  - reduce the number of threads used simultaneously by bundler (#4367, @will-in-wi)</changelog>
  <changelog author="coolo@suse.com" date="1475928000">- updated to version 1.13.2
  see installed CHANGELOG.md
  [#]# 1.13.2 (2016-09-30)
  Bugfixes:
  - allow `Settings` to be initialized without a root directory (@m1k3)
  - allow specifying ruby engines in the gemfile as a symbol (#4919, @JuanitoFatas)
  - avoid an execption when using `bundler/deployment` with Vlad (@srbaker)
  - ensure redefined methods have the same visibility as the one they're replacing, fixing `Kernel.require` failing on JRuby (#4975, @segiddins)
  - ensure that Bundler won't complain about a corrupt lockfile when no lockfile exists when using `gemspec` in the Gemfile (#5006, @segiddins)
  - fail gracefully when parsing the metadata for a gemspec from the compact index fails (@segiddins)
  - fix invoking bundler with binstubs generated by RubyGems 2.6.2+ (#4974, @chrismo)
  Performance:
  - avoid parsing the lockfile twice when evaluating gemfiles (@segiddins)
  [#]# 1.13.1 (2016-09-13)
  Bugfixes:
  - ensure that `Gem::Source` is available, fixing several exceptions (#4944, @dekellum)
  - ensure that dependency resolution works when multiple gems have the same dependency (#4961, @segiddins)
  [#]# 1.13.0 (2016-09-05)
  This space deliberately left blank.
  [#]# 1.13.0.rc.2 (2016-08-21)
  Features:
  - add setting `exec_disable_load` to force `exec` to spawn a new Ruby process (@segiddins)
  - add `doctor` command to help with issues like unlinked compiled gems (#4765, @mistydemeo)
  - rework the `update` command, providing fine-grained control via flags (#4676, @chrismo)
  - add URI to http response output in debug mode (#4808, @NickLaMuro)
  - add manpage for `binstubs` command (#4847, @Zorbash)
  - support `mirror` settings for sources by hostname, not only full URL (@opiethehokie)
  - print gem installation errors after other install output (#4834, @segiddins)
  - add `lock --remove-platform` flag to remove platforms from the lock (#4877, @segiddins)
  - add `only_update_to_newer_versions` setting to prevent downgrades during `update` (@segiddins)
  - expanded expirimental plugin support to include hooks and sources (@asutoshpalai)
  Bugfixes:
  - retry gem downloads (#4846, @jkeiser)
  - improve the CompactIndex to handle capitalized legacy gems (#4867, @segiddins)
  - re-use persistent HTTP connections for CompactIndex (@NickLaMuro)
  - respect `required_ruby_version` when Gemfile contains `ruby` version (@indirect)
  - allow `rake release` to sign git tags (#4743, @eagletmt)
  - set process titles when using `#load` during `exec` (@yob)
  - recognize JRuby shebangs for using `#load` during `exec` (@ojab)
  - handle world-writable home directories (#4726, @allenzhao)
  - support multi-platform gems via the `gemspec` Gemfile method (#4798, @segiddins)
  - print dots correctly for CompactIndex fetcher (@NickLaMuro)
  - set an `open_timeout` when requesting gem data via HTTP (@NickLaMuro)
  - rename the BUNDLE\_ORIG\_ENV variable so it no longer shows up in `config` (@indirect)
  - show help only when `-h` or `--help` is passed to Bundler, not to `exec` (#4801, @segiddins)
  - handle symlinks to binstubs created by `--standalone` (#4782, @terinjokes)
  [#]# 1.13.0.rc.1 (2016-06-27)
  Features:
  - when `bundle config major_deprecations` or `BUNDLE_MAJOR_DEPRECATIONS` is set, deprecation warnings for bundler 2 will be printed (@segiddins)
  - when running with `--verbose`, bundler will print the reason it is re-resolving a gemfile (@segiddins)
  Bugfixes:
  - fix support for running RubyGems 1.x on Ruby 2.3 (#4698, @segiddins)
  - fix bundle exec'ing to a ruby file when gems are installed into a path (#4592, @chrismo)
  - when multiple specs in a bundle have the same executable, prefer activating the one from the requested gem (#4705, @segiddins)
  - stop changing the load path to require the vendored postit when trampolining (@segiddins)
  - ensure relative paths are properly printed after completing an installation (@jenseng)
  - fix re-resolving when there are multiple unchanged path sources (@segiddins)
  - de-init submodules when running git 2.9 and requesting a git gem without submodules (@segiddins)
  [#]# 1.13.0.pre.1 (2016-06-20)
  Performance:
  - speed up gemfile resolution during `bundle install` by between 4x-100x (#4376, @segiddins)
  - generally reduce object allocations when using bundler (@segiddins)
  - speed up bin generation for path gems with many files (#2846, @segiddins)
  - fix detecting path spec changes to avoid re-resolving unnecessarily (@jrafanie)
  Features:
  - automatically trampoline to the bundler version locked in the lockfile, only updating to the running version on `bundle update --bundler` (@segiddins)
  - laying the groundwork for plugin support, which is currently unsuppported, undocumented, disabled by default, and liable to change without notice (@asutoshpalai)
  - allow `bundle viz --without` to accept multiple `:`-delimited groups (@mobilutz)
  - support for RubyGems 2.6.4 (#4368, @segiddins, @RochesterinNYC)
  - colorize updated gem versions (#4334, @bronzdoc)
  - add the `--standalone` flag to `bundle binstubs` (#4594, @b-ggs)
  - update the `bundle gem` CoC to contributor covenant v1.4 (@cllns)
  - use a custom YAML serializer to make config file consistent (@segiddins)
  - filter credentials from error messages (bundler/bundler-features#111, @RochesterinNYC, @sandlerr)
  - support relative paths used inside a nested invocation of `eval_gemfile` (#4584, @RochesterinNYC)
  - fail gracefully when attempting to install a yanked gem (#4344, @allenzhao)
  - automatically install an inline gemfile when gems are missing locally (@segiddins)
  - allow conflicts for gems resolved via `gemspec` (@segiddins)
  - add `--add-platform` option to `bundle lock` (@segiddins)
  - fail gracefully when a resolved spec's `required_ruby_version` or `required_rubygems_version` is incompatible (@segiddins)
  Bugfixes:
  - implicitly unlock the resolved ruby version when the declared requirements in the gemfile are incompatible with the locked version (#4595, #4627, @segiddins)
  - add support for quoted paths in `$PATH` (#4323, @segiddins)
  - check out missing git repos that are not being installed (#3981, @asutoshpalai)
  - write `bundler/setup.rb` to a consistent path (@glennpratt)
  - open editor in `bundle open` with a clean environment (@sj26)
  - resolve infinitely recursive copy when running `bundle package --all` with a `gemspec` in the gemfile (#4392, #4430, @RochesterinNYC)
  - fail gracefully when encountering an `Errno::ENOTSUP` (#4394, @segiddins)
  - fail gracefully when encountering an `Errno::EHOSTUNREACH` (#4642, @allenzhao)
  - fix loading config files with very long values (#4370, @segiddins)
  - only show potential updates for gemfile platforms in `bundle outdated` (#4450, @RochesterinNYC)
  - allow running `bundle install --deployment` after `bundle package --all` with path gems (#2175, @allenzhao)
  - add support for patchlevels in ruby versions in the gemfile and gemspecs (#4593, @chalkos)</changelog>
  <changelog author="coolo@suse.com" date="1477742400">- updated to version 1.13.6
  see installed CHANGELOG.md
  [#]# 1.13.6 (2016-10-22)
  Bugfixes:
  - make the `gem` method public again, fixing a regression in 1.13.4 (#5102, @segiddins)
  [#]# 1.13.5 (2016-10-15)
  Bugfixes:
  - Ensure a locked pre-release spec can always be re-resolved (#5089, @segiddins)
  [#]# 1.13.4 (2016-10-11)
  Bugfixes:
  - stop printing warning when compact index versions file is rewritten (#5064, @indirect)
  - fix `parent directory is world writable but not sticky` error on install (#5043, @indirect)
  - fix for `uninitialized constant Bundler::Plugin::API::Source` error (#5010, @hsbt, @aycabta)
  - make `update` options for major, minor, and patch updates consistent (#4934, @chrismo)
  [#]# 1.13.3 (2016-10-10)
  Bugfixes:
  - add support for weak etags to the new index (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1479038400">- update patch</changelog>
  <changelog author="coolo@suse.com" date="1487073600">- updated to version 1.14.4
  see installed CHANGELOG.md
  [#]# 1.14.4 (2017-02-12)
  Bugfixes:
  - fail gracefully when attempting to overwrite an existing directory with `bundle gem` (#5358, @nodo)
  - fix a resolver bug that would cause bundler to report conflicts that it could resolve (#5359, #5362, @segiddins)
  - set native extension build arguments for git gems (#5401, @segiddins)
  - fix the suggested `bundle lock` command printed when a dependency is unused on any platform (@5t111111)
  - ensure the version passed to `ruby` in the Gemfile is valid during Gemfile parsing (#5380, @segiddins)
  - show `bundle inject` usage when too many arguments are passed (#5384, @Shekharrajak)
  - stop `bundle show --outdated` from implicitly running `bundle update` (#5375, @colby-swandale)
  - allow the temporary home directory fallback to work for multiple users (@svoop)
  [#]# 1.14.3 (2017-01-24)
  Bugfixes:
  - fix the resolver attemting to activate ruby-platform gems when the bundle is only for other platforms (#5349, #5356, @segiddins)
  - avoid re-resolving a locked gemfile that uses `gemspec` and includes development dependencies (#5349, @segiddins)
  [#]# 1.14.2 (2017-01-22)
  Bugfixes:
  - fix using `force_ruby_platform` on windows (#5344, @segiddins)
  - fix an incorrect version conflict error when using `gemspec` on multiple platforms (#5340, @segiddins)
  [#]# 1.14.1 (2017-01-21)
  Bugfixes:
  - work around a ruby 2.2.2 bug that caused a stack consistency error during installation (#5342, @segiddins)
  [#]# 1.14.0 (2017-01-20)
  Bugfixes:
  - ensure `Settings::Mirror` is autoloaded under the `Settings` namespace
    (#5238, @segiddins)
  - fix `bundler/inline` when `BUNDLE_GEMFILE=""` (#5079, @segiddins)
  [#]# 1.14.0.pre.2 (2017-01-11)
  Bugfixes:
  - allow not selecting a gem when running `bundle open` (#5301, @segiddins)
  - support installing gems from git branches that contain shell metacharacters (#5295, @segiddins)
  - fix a resolver error that could leave dependencies unresolved (#5294, @segiddins)
  - fix a stack overflow error when invoking commands (#5296, @segiddins)
  [#]# 1.14.0.pre.1 (2016-12-29)
  Features:
  - `bundle doctor` first runs `bundle check` (@segiddins)
  - the bundler trampoline is automatically enabled when the target version is greater than bundler 2 (@segiddins)
  - gem checksums returned by rubygems.org are validated when installing gems (#4464, @segiddins)
  - use the git username as a github username when running `bundle gem` (@JuanitoFatas)
  - show more context when the resolver conflicts on required ruby and rubygems versions (@segiddins)
  - improve platform support by allowing bundler to pick the best platform match during dependency resolution, enabled with the `specific_platform` setting (#4295, #4896, @segiddins)
  - always prompt the user for a password when using `sudo` (#3006, @segiddins)
  - support running without a home directory (#4778, @segiddins)
  - print a warning when the gemfile uses a platform conditional that will exclude the gem from all lockfile platforms (@segiddins)
  - add the `force_ruby_platform` setting to force bundler to install ruby-platform gems, even on other platforms (#4813, @segiddins)
  - add conservative update options to `bundle lock` (#4912, @chrismo)
  - improve `bundle outdated` output to group gems by group (@ryanfox1985)
  - add conservative update options to `bundle update` (#5065, #5076, @chrismo)
  - print the output of `bundle env` as github-flavored markdown, making it easier to preserve formatting when copy-pasting into a new issue (@segiddins)
  - configure the persistence file when using `bundle gem` with `rspec` (@segiddins)
  - add support for the `ruby_25` gemfile filter (@amatsuda)
  - when installing with a lockfile that is missing dependencies, allow installation to proceed (but without parallelism) (@segiddins)
  Performance:
  - improve `require "bundler"` performance by ~5x (@segiddins)
  - allow install gems in parallel when running on rubygems 2+
  Bugfixes:
  - config files with CRLF line endings can be read (#4435, @segiddins)
  - `bundle lock` activates gems for the current platform even if they were activated under a different platform for a separate dependency (#4896, @segiddins)
  - running `bundle env` in a directory without a gemfile no longer crashes (@segiddins)
  - fail gracefully when attempting to use a source with an unknown URI scheme (#4953, @segiddins)
  - store paths in the lockfile relative to the root gemfile directory when using `eval_gemfile` (#4966, @segiddins)
  - `bundle lock` will not update without the `--update` flag (#4957, @segiddins)
  - the `console` binstub generated by `bundle gem` will load `.irbrc` files (@mattbrictson)
  - print friendly filesystem access errors in the new index (@segiddins)
  - print a helpful error when running out of memory on jruby (#4673, @segiddins)
  - load all rubygems plugins when installing gems (#2824, @segiddins)
  - `bundle clean --dry-run` prints the list of gems without the `--force` option when no path is set (#5027, @hmistry)
  - local installs no longer print "this gem may have been yanked" (#5022, @hmistry)
  - avoid leaking `which` output when running `bundle doctor` (@colby-swandale)
  - print a warning when attempting to `bundle exec` an empty program (#5084, @bronzdoc)
  - ensure `bundle outdated` lists all outdated gems (#4979, @chrismo)
  - fail gracefully when attempting to `bundle gem` with an invalid constant name (#5185, @segiddins)
  - allow `bundler/inline` to work in a directory that contains a gemfile (#5117, @colby-swandale)
  - ensure that the new index is thread-safe, allowing installation on rbx (#5142, @segiddins)
  - remove deprecated `rspec` syntax in `bundle gem` output (@gearnode)
  - fail gracefully when any system error is encountered when touching the filesystem (#5134, @segiddins)
  - fix compatibility with a machine running with FIPS mode enabled (#4989, @segiddins)
  - fix `bundle lock --add-platform ruby` (#5230, @segiddins)
  - print gem post-install messages when running `bundle update` (@smathy)
  - ensure errors due to a retries are all separated by a newline (@segiddins)
  - print out the bundle path in gem not found errors (#4854, @diegosteiner)
  - fail gracefully when creating threads fails (@segiddins)
  - avoid downloading metadata for gems that are only development dependencies (@Paxa)
  [#]# 1.13.7 (2016-12-25)
  Features:
  - add support for the `ruby_24` gemfile filter (#5281, @amatsuda)</changelog>
  <changelog author="coolo@suse.com" date="1489665600">- updated to version 1.14.6
  see installed CHANGELOG.md
  [#]# 1.14.6 (2017-03-03)
  Bugfixes:
  - avoid undefined constant `Bundler::Plugin::API::Source` exception (#5409, @segiddins)
  - avoid incorrect warnings about needing to enable `specific_platform` (@segiddins)
  - fail gracefully when the compact index does not send an ETag (#5463, @olleolleolle)
  - ensure `bundle outdated --local` shows all outdated gems (#5430, @denniss)
  - fix a case where ruby version requirements could lead to incorrect resolver conflicts (#5425, @segiddins)
  [#]# 1.14.5 (2017-02-22)
  Bugfixes:
  - avoid loading all unused gemspecs during `bundle exec` on RubyGems 2.3+ (@segiddins)
  - improve resolver performance when dependencies have zero or one total possibilities ignoring requirements (#5444, #5457, @segiddins)
  - enable compact index when OpenSSL FIPS mode is enabled but not active (#5433, @wjordan)
  - use github username instead of git name for the github url in `bundle gem` (#5438, @danielpclark)
  - avoid a TypeError on RubyGems 2.6.8 when no build settings are set for native extensions (@okkez)
  - fail gracefully when the dependency api is missing runtime dependencies for a gem (@segiddins)
  - handle when a platform-specific gem has more dependencies than the ruby platform version (#5339, #5426, @segiddins)
  - allow running bundler on a machine with no home directory where the temporary directory is not writable (#5371, @segiddins)
  - avoid gem version conflicts on openssl using Ruby 2.5 (#5235, @rhenium)
  - fail when installing in frozen mode and the dependencies for `gemspec` gems have changed without the lockfile being updated (#5264, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1489665601">- fix gemspec_remove_pem.patch</changelog>
  <changelog author="coolo@suse.com" date="1495540800">- updated to version 1.15.0
  see installed CHANGELOG.md
  [#]# 1.15.0 (2017-05-19)
  This space intentionally left blank.
  [#]# 1.15.0.pre.4 (2017-05-10)
  Bugfixes:
  - avoid conflicts when `Gem.finish_resolve` is called after the bundle has been set up (@segiddins)
  - ensure that `Gem::Specification.find_by_name` always returns an object that can have `#to_spec` called on it (#5592, @jules2689)
  [#]# 1.15.0.pre.3 (2017-04-30)
  Bugfixes:
  - avoid redundant blank lines in the readme generated by `bundle gem` (@koic)
  - ensure that `open-uri` is not loaded after `bundle exec` (@segiddins)
  - print a helpful error message when an activated default gem conflicts with
    a gem in the gemfile (@segiddins)
  - only shorten `ref` option for git gems when it is a SHA (#5620, @segiddins)
  [#]# 1.15.0.pre.2 (2017-04-23)
  Bugfixes:
  - ensure pre-existing fit caches are updated from remote sources (#5423, @alextaylor000)
  - avoid duplicating specs in the lockfile after updating with the gem uninstalled (#5599, @segiddins)
  - ensure git gems have their extensions available at runtime (#5594, @jules2689, @segiddins)
  [#]# 1.15.0.pre.1 (2017-04-16)
  Features:
  - print a notification when a newer version of bundler is available (#4683, @segiddins)
  - add man pages for all bundler commands (#4988, @feministy)
  - add the `bundle info` command (@fredrb, @colby-swandale)
  - all files created with `bundle gem` comply with the bundler style guide (@zachahn)
  - if installing a gem fails, print out the reason the gem needed to be installed (#5078, @segiddins)
  - allow setting `gem.push_key` to set the key used when running `rake release` (@DTrierweiler)
  - print gem versions that are regressing during `bundle update` in yellow (#5506, @brchristian)
  - avoid printing extraneous dependencies when the resolver encounters a conflict (@segiddins)
  - add the `bundle issue` command that prints instructions for reporting issues (#4871, @jonathanpike)
  - add `--source` and `--group` options to the `bundle inject` command (#5452, @Shekharrajak)
  - add the `bundle add` command to add a gem to the gemfile (@denniss)
  - add the `bundle pristine` command to re-install gems from cached `.gem` files (#4509, @denniss)
  - add a `--parseable` option for `bundle config` (@JuanitoFatas, @colby-swandale)
  Performance:
  - speed up gemfile initialization by storing locked dependencies as a hash (@jules2689)
  - speed up gemfile initialization by making locked dependency comparison lazy, avoiding object allocation (@jules2689)
  - only validate git gems when they are downloaded, instead of every time `Bundler.setup` is run (@segiddins)
  - avoid regenerating the lockfile when nothing has changed (@segiddins)
  - avoid diffing large arrays when no sources in the gemfile have changed (@segiddins)
  - avoid evaluating full gemspecs when running with RubyGems 2.5+ (@segiddins)
  Bugfixes:
  - fix cases where `bundle update` would print a resolver conflict instead of updating the selected gems (#5031, #5095, @segiddins)
  - print out a stack trace after an interrupt when running in debug mode (@segiddins)
  - print out when bundler starts fetching a gem from a remote server (@segiddins)
  - fix `bundle gem` failing when `git` is unavailable (#5458, @Shekharrajak, @colby-swandale)
  - suggest the appropriate command to unfreeze a bundle (#5009, @denniss)
  - ensure nested calls to `bundle exec` resolve default gems correctly (#5500, @segiddins)
  - ensure that a plugin failing to install doesn't uninstall other plugins (@kerrizor, @roseaboveit)
  - ensure `socket` is required before being referenced (#5533, @rafaelfranca)
  - allow running `bundle outdated` when gems aren't installed locally (#5553, @segiddins)
  - print a helpful error when `bundle exec`ing to a gem that isn't included in the bundle (#5487, @segiddins)
  - print an error message when a non-git gem is given a `branch` option (#5530, @colby-swandale)
  - allow interrupts to exit the process after gems have been installed (@segiddins)
  - print the underlying error when downloading gem metadata fails (#5579, @segiddins)
  - avoid deadlocking when installing with a lockfile that is missing dependencies (#5378, #5480, #5519, #5526, #5529, #5549, #5572, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1497614400">- update to 1.15.1
  - Bugfixes:
  - `bundle lock --update GEM` will fail gracefully when the gem
    is not in the lockfile (#5693, @segiddins)
  - `bundle init --gemspec` will fail gracefully when the gemspec
    is invalid (@colby-swandale)
  - `bundle install --force` works when the gemfile contains git
    gems (#5678, @segiddins)
  - `bundle env` will print well-formed markdown when there are
    no settings (#5677, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552000">- update to 1.15.2
  - Features:
  - new gemfiles created by bundler will include an explicit
    `github` git source that uses `https` (@segiddins)
  - Bugfixes:
  - inline gemfiles work when `BUNDLE_BIN` is set (#5847,
    @segiddins)
  - avoid using the old dependency API when there are no changes
    to the compact index files (#5373, @greysteil)
  - fail gracefully when the full index serves gemspecs with
    invalid dependencies (#5797, @segiddins)
  - support installing gemfiles that use `eval_gemfile`, `:path`
    gems with relative paths, and `--deployment` simultaneously
    (@NickLaMuro)
  - `bundle config` will print settings as the type they are
    interpreted as (@segiddins)
  - respect the `no_proxy` environment variable when making
    network requests (#5781, @jakauppila)
  - commands invoked with `--verbose` will not have default flags
    printed (@segiddins)
  - allow `bundle viz` to work when another gem has a requirable
    `grapviz` file (#5707, @segiddins)
  - ensure bundler puts activated gems on the `$LOAD_PATH` in a
    consistent order (#5696, @segiddins)</changelog>
  <changelog author="mrueckert@suse.de" date="1500552001">- switch to already patched gem file until we figure out how to
  handle the slightly different gem spec --ruby output on TW</changelog>
  <changelog author="coolo@suse.com" date="1501761600">- updated to version 1.15.3
  see installed CHANGELOG.md
  [#]# 1.15.3 (2017-07-21)
  Bugfixes:
  - ensure that empty strings passed to `bundle config` are serialized &amp; parsed properly (#5881, @segiddins)
  - avoid printing an outdated version warning when running a parseable command (@segiddins)</changelog>
  <changelog author="coolo@suse.com" date="1504440000">- updated to version 1.15.4
  see installed CHANGELOG.md
  [#]# 1.15.4 (2017-08-19)
  Bugfixes:
  - handle file conflicts gracefully in `bundle gem` (@rafaelfranca, @segiddins)
  - bundler will fail gracefully when the bundle path contains the system path separator (#5485, ajwann)
  - failed gem downloads will be retried consistently across different RubyGems versions (@shayonj)
  - `bundle pristine` will respect build options while re-building native extensions (@NickLaMuro)</changelog>
  <changelog author="coolo@suse.com" date="1512302400">- updated to version 1.16.0
  see installed CHANGELOG.md
  [#]# 1.16.0 (2017-10-31)
  Bugfixes:
  - avoid new RubyGems warning about unsafe YAML loading (to keep output consistent) (@segiddins)
  - load digest subclasses in a thread-safe manner (@segiddins, @colby-swandale)
  - avoid unusued variable warnings under ruby 2.5 (@amatsuda)
  - fix printing the same message twice in verbose mode ([#6028](https://github.com/bundler/bundler/issues/6028), @akhramov)
  - allow `SignalException`s to bubble up to the interpreter during `bundle exec` ([#6090](https://github.com/bundler/bundler/issues/6090), @dekellum)
  - avoid activating stdlib digest under Ruby 2.5 (@segiddins)
  - prioritise explicitly requested gems in dependency resolution sort order (@segiddins)
  - reduce memory usage during dependency resolution ([#6114](https://github.com/bundler/bundler/issues/6114), @greysteil)
  - ensure that the default bundler gem is not accidentally activated on ruby 2.5 when using local git overrides (@segiddins)
  [#]# 1.16.0.pre.3 (2017-10-04)
  Features:
  - the output from `bundle env` includes more information, particularly both the compiled &amp; loaded versions of OpenSSL (@indirect)
  Bugfixes:
  - fix a bug where installing on FreeBSD would accidentally raise an error (#6013, @olleolleolle)
  - fix a regression in 1.16 where pre-release gems could accidentally be resolved even when the gemfile contained no pre-release requirements (@greysteil)
  - bundler will avoid making unnecessary network requests to fetch dependency data, fixing a regression introduced in 1.16 (@segiddins)
  - the outdated bundler version message is disabled by default until the message has been fine-tuned (#6004, @segiddins)
  [#]# 1.16.0.pre.2 (2017-09-06)
  Bugfixes:
  - handle when a connection is missing a socket when warning about OpenSSL version (@greysteil)
  - the description for the `rake release` task now reflects `$RUBYGEMS_HOST` (@wadetandy)
  - fix a bug where `bundle update` would regress transitive dependencies (@greysteil)
  [#]# 1.16.0.pre.1 (2017-09-04)
  Features:
  - allow using non-branch symbolic refs in a git source (#4845, @segiddins)
  - allow absolute paths in the `cache path` setting (#5627, @mal)
  - gems created via `bundle gem` with rspec have `--require spec_helper` in their `.rspec` file (@koic)
  - `bundle env` includes `Gem.ruby` and the `bundle` binstub shebang when they don't match (#5616, @segiddins)
  - allow passing gem names to `bundle pristine` (@segiddins)
  - `bundle version` and `bundle env` include the commit and build date for the bundler gem (#5049, @segiddins)
  - add the `--shebang` option to `bundle binstubs` (#4070, @segiddins, @Zorbash)
  - gemfiles are `eval`ed one fewer time when running `bundle install` (#4952, #3096, #4417, @segiddins)
  - the `fileutils` gem is now vendored so different versions of the gem can be activated (@segiddins)
  - speed up no-op installations (#5842, @segiddins)
  - default to keeping the lockfile in the default gem template (@deivid-rodriguez)
  - add a special bundler binstub that ensures the correct version of bundler is activated (#5876, @segiddins)
  - speed up dependency resolution and ensure that all resolvable gemfiles can be installed (@segiddins, @greysteil)
  - add a `bundle list` command that prints the gems in use (#4754, @colby-swandale)
  - allow adding credentials to a gem source during deployment when `allow_deployment_source_credential_changes` is set (@adrian-gomez)
  - making an outdated (and insecure) TLS connection to rubygems.org will print a warning (@segiddins)
  Bugfixes:
  - allow configuring a mirror fallback timeout without a trailing slash (#4830, @segiddins)
  - fix handling of mirrors for file: urls that contain upper-case characters (@segiddins)
  - list the correct gem host for `rake release` when `allowed_push_host` has been set (@mdeering)
  - ensure `Bundler.original_env` preserves all env keys that bundler sets (#5700, @segiddins)
  - ensure `bundle pristine` removes files added to a git gem (@segiddins)
  - load plugin files from path gems before gem installation (#5429, @segiddins)
  - ensure gems containing manpages are properly set up (#5730, @segiddins)
  - avoid fetching remote specs when all effected gems are in groups that are not being installed (@segiddins)
  - allow `BUNDLE_GEMFILE` to be a relative path (#5712, @gxespino)
  - show a more helpful error message when a gem fails to install due to a corrupted lockfile (#5846, @segiddins)
  - add a process lock to allow multiple concurrent `bundle install`s (#5851, @stefansedich)
  - ensure that specifications always return an array for `#extensions` (@greysteil)
  - print a helpful error message when using a gem in the Gemfile with an empty name (@colby-swandale)
  - ensure that all gemfiles are included in `bundle env` (@segiddins)
  - use ssl client cert and ca cert settings from gem configuration as fallbacks (@stan3)
  - avoid global namespace pollution when loading gems (#5958, @shyouhei)
  - avoid running a complete re-resolve on `bundle update --bundler` (@segiddins)
  - allow `bundle binstubs --standalone` to work without `path` being set (@colby-swandale)
  - fix support for bundle paths that include jars or wars on jruby (#5975, @torcido)</changelog>
  <changelog author="coolo@suse.com" date="1515499200">- updated to version 1.16.1
  see installed CHANGELOG.md
  [#]# 1.16.1 (2017-12-12)
  Bugfixes:
  - avoid hanging on complex resolver errors ([#6114](https://github.com/bundler/bundler/issues/6114), @halfbyte)
  - avoid an error when running `bundle update --group` ([#6156](https://github.com/bundler/bundler/issues/6156), @mattbrictson)
  - ensure the resolver prefers non-pre-release gems when possible ([#6181](https://github.com/bundler/bundler/issues/6181), @greysteil)
  - include bundler's gemspec in the built gem ([#6165](https://github.com/bundler/bundler/issues/6165), @dr-itz)
  - ensure locally installed specs are not overriden by those in remote sources during dependency resolution ([#6072](https://github.com/bundler/bundler/issues/6072), @indirect)
  - ensure custom gemfiles are respected in generated binstubs (@pftg)
  - fail gracefully when loading a bundler-generated binstub when `bin/bundle` was not generated by bundler ([#6149](https://github.com/bundler/bundler/issues/6149), @hsbt)
  - allow `bundle init` to be run even when a parent directory contains a gemfile ([#6205](https://github.com/bundler/bundler/issues/6205), @colby-swandale)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1590494400">- added https://patch-diff.githubusercontent.com/raw/rubygems/bundler/pull/7416.patch
  VUL-0: CVE-2019-3881: rubygem-bundler: Insecure permissions on
  directory in /tmp/ allows malicious code execution (boo#1143436)</changelog>
</package>
<package pkgid="530d2f328176af9c688ea052161c680e7f85910b576aa9e08d852f9719960eed" name="sar2" arch="src">
  <version epoch="0" ver="2.5.0" rel="lp152.2.3.1"/>
  <changelog author="hector1987@gmail.com" date="1303646400">- initial build (v 2.3.0)</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966400">- spec cleanup</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966401">- split off data subpackage</changelog>
  <changelog author="jreidinger@suse.com" date="1322827200">- fix building (libs.patch)</changelog>
  <changelog author="jengelh@medozas.de" date="1322827201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1358424000">- Fixed the spec file to be able to build for openSUSE &gt; 12.2</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to version 2.3.2
- Add appdata.xml
- Build with optflags</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528804800">- Update to version 2.3.3:
  * Upstream some patches submitted by contributors to facilitate
    the package build process.
  * Fix a number of old urls to point to the Github location.
- Drop upstreamed patches:
  * appdata.patch.
  * sar2-2.3.2-optflags.patch.
- Clean spec file.</changelog>
  <changelog author="code@hector.link" date="1587902400">- Update to version 2.4.0:
  * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings.
  * Fix lagging when aircraft is landed.
  * Honor wheel brake coefficient.</changelog>
  <changelog author="code@hector.link" date="1592740800">- Update to version 2.5.0:
  * Add preliminary OSX support.
  * Improve lagging on touch-down event.
  * Fix crash when loading Free Flight mode.
  * Add wind support and aerodynamic drag.
  * Add 2 training missions in windy weather.
  * Add support for wind gusts.
  * Rework airplane physics and stalling conditions.
  * Adjust models for more realistic speed and service ceiling conditions.
  * Allow a minimum helicopter throotle to 25% (previously it was 50%).
  * Let smoke be carried by the wind.
  * Add a switch in simulation options to enable/disable Wind.
  * Add wind conditions to all Guadarrama missions.</changelog>
</package>
<package pkgid="9fa645a9fdf65c4e40b37ade2e1ad3f5aa1aeab384ccf4998f06694116d2d56c" name="sar2" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp152.2.3.1"/>
  <changelog author="hector1987@gmail.com" date="1303646400">- initial build (v 2.3.0)</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966400">- spec cleanup</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966401">- split off data subpackage</changelog>
  <changelog author="jreidinger@suse.com" date="1322827200">- fix building (libs.patch)</changelog>
  <changelog author="jengelh@medozas.de" date="1322827201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1358424000">- Fixed the spec file to be able to build for openSUSE &gt; 12.2</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to version 2.3.2
- Add appdata.xml
- Build with optflags</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528804800">- Update to version 2.3.3:
  * Upstream some patches submitted by contributors to facilitate
    the package build process.
  * Fix a number of old urls to point to the Github location.
- Drop upstreamed patches:
  * appdata.patch.
  * sar2-2.3.2-optflags.patch.
- Clean spec file.</changelog>
  <changelog author="code@hector.link" date="1587902400">- Update to version 2.4.0:
  * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings.
  * Fix lagging when aircraft is landed.
  * Honor wheel brake coefficient.</changelog>
  <changelog author="code@hector.link" date="1592740800">- Update to version 2.5.0:
  * Add preliminary OSX support.
  * Improve lagging on touch-down event.
  * Fix crash when loading Free Flight mode.
  * Add wind support and aerodynamic drag.
  * Add 2 training missions in windy weather.
  * Add support for wind gusts.
  * Rework airplane physics and stalling conditions.
  * Adjust models for more realistic speed and service ceiling conditions.
  * Allow a minimum helicopter throotle to 25% (previously it was 50%).
  * Let smoke be carried by the wind.
  * Add a switch in simulation options to enable/disable Wind.
  * Add wind conditions to all Guadarrama missions.</changelog>
</package>
<package pkgid="5cf8237b821b7494406f0d1b3520a991ca2692a469a4eef937519fa806f22821" name="sar2-data" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="lp152.2.3.1"/>
  <changelog author="hector1987@gmail.com" date="1303646400">- initial build (v 2.3.0)</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966400">- spec cleanup</changelog>
  <changelog author="prusnak@opensuse.org" date="1307966401">- split off data subpackage</changelog>
  <changelog author="jreidinger@suse.com" date="1322827200">- fix building (libs.patch)</changelog>
  <changelog author="jengelh@medozas.de" date="1322827201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1358424000">- Fixed the spec file to be able to build for openSUSE &gt; 12.2</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to version 2.3.2
- Add appdata.xml
- Build with optflags</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528804800">- Update to version 2.3.3:
  * Upstream some patches submitted by contributors to facilitate
    the package build process.
  * Fix a number of old urls to point to the Github location.
- Drop upstreamed patches:
  * appdata.patch.
  * sar2-2.3.2-optflags.patch.
- Clean spec file.</changelog>
  <changelog author="code@hector.link" date="1587902400">- Update to version 2.4.0:
  * Improvements to the Joystick system, adding new Rudder+Brakes mode, moving to libSDL2 and cleaning up unused menu settings.
  * Fix lagging when aircraft is landed.
  * Honor wheel brake coefficient.</changelog>
  <changelog author="code@hector.link" date="1592740800">- Update to version 2.5.0:
  * Add preliminary OSX support.
  * Improve lagging on touch-down event.
  * Fix crash when loading Free Flight mode.
  * Add wind support and aerodynamic drag.
  * Add 2 training missions in windy weather.
  * Add support for wind gusts.
  * Rework airplane physics and stalling conditions.
  * Adjust models for more realistic speed and service ceiling conditions.
  * Allow a minimum helicopter throotle to 25% (previously it was 50%).
  * Let smoke be carried by the wind.
  * Add a switch in simulation options to enable/disable Wind.
  * Add wind conditions to all Guadarrama missions.</changelog>
</package>
<package pkgid="c35f416a8c580d278c79f138062519e283c5dcf94e4dcfc66f77ee13ca1f8491" name="susefirewall2-to-firewalld" arch="noarch">
  <version epoch="0" ver="0.0.4" rel="lp152.3.3.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
  <changelog author="mchandras@suse.de" date="1521460800">- Version bump to 0.0.2
  * Handle migration when SF2 is absent (bsc#1084177)
  * Ensure that firewalld is enabled after migration
  * Print firewalld commands in debug mode</changelog>
  <changelog author="mchandras@suse.de" date="1527681600">- Version bump to 0.0.3
  * Do not try to handle unknown iptables chains
  * Handle source whitelisting (gh#openSUSE/susefirewall2-to-firewalld#2, bsc#1105157)</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1542024000">- Version bump to 0.0.4
  * Add input and forward zone to the known ones (bsc#1115001)
  * Stop guessing firewall service from port/proto</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1588161600">- add 0001-Fix-ERROR-INVALID_PORT-when-sport-iptables-rules-are.patch: fix
  "INVALID_PORT" error message with certain SuSEfirewall2 configurations
  (bsc#1170461).</changelog>
</package>
<package pkgid="c915cce527126bcf193cf18c9e7b15c4c1fd71940a051c7e6098406bd7c1ac23" name="susefirewall2-to-firewalld" arch="src">
  <version epoch="0" ver="0.0.4" rel="lp152.3.3.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
  <changelog author="mchandras@suse.de" date="1521460800">- Version bump to 0.0.2
  * Handle migration when SF2 is absent (bsc#1084177)
  * Ensure that firewalld is enabled after migration
  * Print firewalld commands in debug mode</changelog>
  <changelog author="mchandras@suse.de" date="1527681600">- Version bump to 0.0.3
  * Do not try to handle unknown iptables chains
  * Handle source whitelisting (gh#openSUSE/susefirewall2-to-firewalld#2, bsc#1105157)</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1542024000">- Version bump to 0.0.4
  * Add input and forward zone to the known ones (bsc#1115001)
  * Stop guessing firewall service from port/proto</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1588161600">- add 0001-Fix-ERROR-INVALID_PORT-when-sport-iptables-rules-are.patch: fix
  "INVALID_PORT" error message with certain SuSEfirewall2 configurations
  (bsc#1170461).</changelog>
</package>
<package pkgid="5753c07025f00abe12d20f04189a40a6da24ac6e55d25ec66214cb0bc85040d8" name="update-test-32bit-pkg-32bit" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="a44219027a56ef0167909f29ead3194df93d0664ad38aaeffa9a023452b45c45" name="update-test-32bit-pkg" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="5d09ff0b09a1e6c99f3b2f7494093835a6de3a249d5e570501e2be1b8b00894c" name="update-test-32bit-pkg" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="4841c31709ed5289965e07482e0e53873d91b307009a0489fa516ebacdd96e52" name="update-test-affects-package-manager" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="7bcf8c2a32e79d5f2df33648e74436c9563aef7cdbdf74ca6086c2f8113ddf70" name="update-test-affects-package-manager" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="3e70e12639a08396185b0503ae29fe896aadde2d84e9a38eb76f0d7bff5b18fa" name="update-test-broken" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="4f067f42f12167ce1fb30a631935b5048d0e251c0c1f437ee0d3998992791943" name="update-test-broken" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="e6c2c902f00cc798f592185b7716ab3dbb6609324d99f366b3f5b604cbdbd48e" name="update-test-feature" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="2e457c9828d3cf769799764c1672e332116e9c33b9a2d996176a984f0b97701c" name="update-test-feature" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="cc3c6a39214b7529c58b7c0c4c3f036f7cf0edaec8958a55026e4f11d9091bd0" name="update-test-interactive" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="73f16fd1e166fe465af0469105400109a05b01889501ce32429bca044386ba04" name="update-test-interactive" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="a8f9cf1e9a937c612fd9e38261f58e85ab23b6025b407a5de07e87dae010fa46" name="update-test-optional" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="eb2e1cf0521410fd30b42fc2b8fe545255f61de220b368615f7669138863a348" name="update-test-optional" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="e1dea55a4c458b315ba9695b7dc053a939f29e0b4fdac890e95b08a3428b0350" name="update-test-reboot-needed" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="47e7e2022eefd5e92121ab24836342f0867f07edf1cdf71de376746800b976e3" name="update-test-reboot-needed" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="2e08aea8dc56461092db035262fbfd7b7f3a2e559d456b5a6318899c7c704bf5" name="update-test-relogin-suggested" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="7695eb1b9dae5578ffceaab7ef8d833cf4e06beb2d214b67542503794afc33c2" name="update-test-relogin-suggested" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="212ca45de010896a0ce2d5ad31879d4dce2f4ace9b4ba9802fcc81e9f0855d8f" name="update-test-retracted" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.7.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="Martin Kravec &lt;mkravec@suse.com&gt;" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="Gustavo Pichorim Boiko &lt;gboiko@suse.com&gt;" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="4501652b56a79cbb55ecde91fa9a126fc11817b02ced4874a8456322b4323bf5" name="update-test-retracted" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.7.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="Martin Kravec &lt;mkravec@suse.com&gt;" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="Gustavo Pichorim Boiko &lt;gboiko@suse.com&gt;" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="31fee7cfd92146dafe071d9f2f93e1e7d2f2b3df3538b8d1b9ce059a10857242" name="update-test-security" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="55c2f27ac9a0a8e1f95fe0b392be302ee66014075ce4ca3818d34431042da67b" name="update-test-security" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="33ddde055d1c504efa6f2fb2a9cd15ea73a6af93f1656d1308b3f95a395247bc" name="update-test-trivial" arch="i586">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="e60287b7a527cad8ba78f1ca2989874841a0647a63464a9938563c54e7879eda" name="update-test-trivial" arch="src">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="hmuelle@suse.de" date="1161172800">- created initial update-test-trival package for testing our update
  stack</changelog>
  <changelog author="mvidner@suse.cz" date="1162987200">- Added subpackages to test other kinds of patches.
- 1.1</changelog>
  <changelog author="hmuelle@suse.de" date="1165233600">- Fixed specfile to avoid locale issues (Müller -&gt; Mueller)</changelog>
  <changelog author="hmuelle@suse.de" date="1169035200">- Fixed specfile and downgrade version to 1.2
  99.9 is reserved for "universal updates testing" during beta
  cycles</changelog>
  <changelog author="lrupp@suse.de" date="1171540800">- specfile rewrite:
  + create the documentation files inline:
    (add version, release and date)
  + use get_version_number.sh and get_release_number.sh
    for "easier" preparing mbuild numbers
- version 1.3-0</changelog>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="4929580595c8b02a687588b924354cdff237d47294d006d36420ed2905298036" name="update-test-trivial" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp152.4.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="99524e846aecaab6266c43016869439742858f2fd59e154aac0cf9066d329cd0" name="xkeyboard-config" arch="noarch">
  <version epoch="0" ver="2.23.1" rel="lp152.5.3.1"/>
  <changelog author="sndirsch@suse.com" date="1432728000">-  Update to version 2.15
  * Here is another minor release. Thanks to the Translation
    Project for the several updated translations.
  - symbols/typo: rework typographic layout.
  - Add support for Latinamerican Dvorak layout
  - added lk(us)
  - fixed the license (removed GPL)
  - Removed GPLv3 line
  - Fixed Singhala -&gt; Sinhala
  - Updated cm layout
  - Updated from TP
  - Update from TP
  - Define &lt;LSGT&gt; key properly in basic layout</changelog>
  <changelog author="sndirsch@suse.com" date="1445342400">- Update to version 2.16
  * Move apostrophe U+0027 to the first level and add U+02BC one to
    ua(unicode)
  * Add support for chromebooks layout
  * Add missing semicolons in symbols/inet
  * Undo incompatible us(dvp) layout additions
  * Define a keyboard layout for the Ol Chiki script
  * new layout - Russian Phonetic Czech
  * Correct capitalization and naming of us(dvp) "Programmer Dvorak"
  * added swap_lalt_lwin
  * fixed Icelandic Dvorak
  * Broken xml fixed
  * Fixed mac file, use utf-8
  * Added Teck keyboard
  * added missing Teck file
  * prerelease translation sync
  * Added Finnish DAS layout
- refreshed n_suse.patch</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1445342401">- Rename n_suse.patch -&gt; n_suse-ctrl-alt-bksp-terminate.patch to
  reflect patch usage
- Rename disable-2xalt_2xctrl-toggle.diff -&gt;
  n_disable-2xalt_2xctrl-toggle.diff to follow X11:XOrg patch
  guidelines</changelog>
  <changelog author="eich@suse.com" date="1451304000">- Removed link from /usr/share/X11/xkb/xkbcomp to /usr/bin/xkbcomp
- Removed xkbcomp as Buildrequire (bnc#953161)
- Added man page xkeyboard-config (7)</changelog>
  <changelog author="eich@suse.com" date="1451304001">- Adding 'BuildRequires: xsltproc' to build man page.</changelog>
  <changelog author="sndirsch@suse.com" date="1453464000">- add /usr/share/X11 dir to filelist in order to fix build again</changelog>
  <changelog author="sndirsch@suse.com" date="1453896000">- Update to version 2.17
  * Added sbj keymap for Jolla phone
  * Adding the option to make Caps Lock act as a Menu key.
  * add altwin:prtsc_rwin
  * Add br(thinkpad) to the xml files
  * symbols/group: re-enable grp:ctrls_toggle
  * Make us(dvp) work with regular right Alt key again
  * Updated Azerbaijani layout
  * Azerty French Layout
  * Added French Togo
  * More changes to tg layout
  * Added de(koy)
  * syntax fix
  * Translations updated before release
  * Reenable layer5-lock for de variants
  * Icelandic QWERTY Layout: Add ability to write Icelandic quotation marks (??)</changelog>
  <changelog author="sndirsch@suse.com" date="1465214400">- Update to version 2.18
  * Add Ctrl+Win keyboard layout switch.
  * rules: Giving the caps:ctrl_modifier option a distinctive description.
  * Sorting the Caps Lock options in a consistent manner.
  * symbols: add explicit definition for Group2 to win_space_toggle
  * Added Bone layout (including the q/eszett variant) and Neo qwertz/qwerty
  * Added the Ruble signe
  * Added us(carpalx)
  * Add Algerian layout with variants
  * Added some Asian layouts
  * Added US layout for IBM Arabic 238L
  * Synced descriptions
  * Added Armenian dram sign to Armenian phonetic
  * Fixed ISO codes for Jawi</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Run over with spec-cleaner - pkgconfig/perl deps conversion
- Use post dependency on coreutils instead of prereq
- Disable silent rules to see whats happening
- Tweak configure options to match what configure.ac contains and what
  is needed
- Remove path provides on the old /etc location, should not be needed
  after all those years</changelog>
  <changelog author="sndirsch@suse.com" date="1475582400">- Update to version 2.19
  * Bug fixes and performance improvements</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 2.20
  * Bug fixes and performance improvements</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1496404800">- Update to version 2.21:
  + Two "Hausa" layout variants with identical descriptions
  + Fixed RALT config of de(T3)
  + Descriptions formatting, typos and mistakes v2
  + two new layouts "Russian (Germany, recommended)" and "Russian (Germany,
    transliteration)" for german keyboards
  + Updated apl stuff
  + Updated apl version
  + Added it(fur)
  + Updated translations (broken with prev commit)
  + Add missing letter I? to French (Togo) keyboard and update language list
  + Duplicate "Malay (Jawi)" entry
  + Update to lk(us)
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Amending typo
  + English (Canada) input source is missing the left backslash key
  + UK is not an exception any more
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Adding Sarala Telugu Keyboard layout.
  + steelseries apex300 geometry</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507204800">- Update to version 2.22:
  + typofix tel-sarala key layout
  + Whitelist Indian keyboard layouts. #101532
  + Enable level3 ralt_switch by default in Kazakh (ext) layout.
  + Extend more keys in Kazakh (ext) layout.
  + Add "AltGr" back into the description for altgr-intl layouts
  + Added Old Hungarian layout
  + ctrl: add missing modifier_map
  + Add grp:menu_switch
  + adds the shortDescription for es-cat and es-ast layouts
  + Added Friulian translation
  + Missing fur in ALL_LINGUAS added
  + Add a Arabic version of Jawi keyboard layout and it's own phonetic version
  + Adding Finnish Dvorak layout
  + Add Ladin layout for it and de keyboards
  + Double Russian fixed
  + Possible typo in word "lever"
  + Typo for Dell latitude
  + Choose only one between "behavior" and "behaviour"
  + Typo in "non-breakable space"
  + Spelling fix in guillemets
  + Add Swedish sv_dvorak based on us dvorak-intl
  + fixed nontranslatable description and shortDescription tags
  + Prerelease translations sync
  + Added a bit of explanation for diff, to make it clear
  + Fixed old Hungarian
  + Replaced NoSymbol with dead_belowmacron in default German keyboard layout
  + Added Polyglot and Reactionary Russian layout</changelog>
  <changelog author="sndirsch@suse.com" date="1507636800">- n_suse-ctrl-alt-bksp-terminate.patch
  * removed the hunk, which made Shift-RCTL and Shift-RALT the
    default Compose key (bsc#1059438)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Add U_xkeyboard-config_fix-typo-hungarian.patch: Fix typo in
  hungarian (fdo#103123).</changelog>
  <changelog author="sndirsch@suse.com" date="1517400000">- Update to version 2.23
  * Added it(intl), it(scn) and us(scn)
  * Minor fidvorak adjustment
  * Typo fixed
  * Refreshed the default Arabic keyboard layout
  * more robust comment handling
  * replace '?' (0x10002bc) with '?' (0x100055a) in armenian layout
  * Add polish layout for use glagolica script
  * Use default compose key with Finnish keyboard
  * incomplete Finnish fix patch
  * Prerelease translation sync
  * Added International Phonetic Alphabet
- supersedes U_xkeyboard-config_fix-typo-hungarian.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1517486400">- Update to version 2.23.1
  * Fixing the build</changelog>
  <changelog author="sndirsch@suse.com" date="1517572800">- U_Fix-typo-in-Polish-symbols-file.patch
  * fixes broken polish symbols file (fdo#104904)</changelog>
  <changelog author="sndirsch@suse.com" date="1548936000">- U_Map-evdev-keycodes-KEY_RFKILL-and-KEY_WWAN-to-XF86RF.patch
  * fixes missing mappings for evdev keys KEY_RFKILL and KEY_WWAN
    (boo#1123784)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1570881600">- U_Updating-Old-Hungarian.patch
  * fix capslock in Old Hungarian layout (boo#1153774)</changelog>
</package>
<package pkgid="cd5370acf062a0656201178b47ffa3692a22931f895224e1544bff7f60962b35" name="xkeyboard-config" arch="src">
  <version epoch="0" ver="2.23.1" rel="lp152.5.3.1"/>
  <changelog author="sndirsch@suse.com" date="1432728000">-  Update to version 2.15
  * Here is another minor release. Thanks to the Translation
    Project for the several updated translations.
  - symbols/typo: rework typographic layout.
  - Add support for Latinamerican Dvorak layout
  - added lk(us)
  - fixed the license (removed GPL)
  - Removed GPLv3 line
  - Fixed Singhala -&gt; Sinhala
  - Updated cm layout
  - Updated from TP
  - Update from TP
  - Define &lt;LSGT&gt; key properly in basic layout</changelog>
  <changelog author="sndirsch@suse.com" date="1445342400">- Update to version 2.16
  * Move apostrophe U+0027 to the first level and add U+02BC one to
    ua(unicode)
  * Add support for chromebooks layout
  * Add missing semicolons in symbols/inet
  * Undo incompatible us(dvp) layout additions
  * Define a keyboard layout for the Ol Chiki script
  * new layout - Russian Phonetic Czech
  * Correct capitalization and naming of us(dvp) "Programmer Dvorak"
  * added swap_lalt_lwin
  * fixed Icelandic Dvorak
  * Broken xml fixed
  * Fixed mac file, use utf-8
  * Added Teck keyboard
  * added missing Teck file
  * prerelease translation sync
  * Added Finnish DAS layout
- refreshed n_suse.patch</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1445342401">- Rename n_suse.patch -&gt; n_suse-ctrl-alt-bksp-terminate.patch to
  reflect patch usage
- Rename disable-2xalt_2xctrl-toggle.diff -&gt;
  n_disable-2xalt_2xctrl-toggle.diff to follow X11:XOrg patch
  guidelines</changelog>
  <changelog author="eich@suse.com" date="1451304000">- Removed link from /usr/share/X11/xkb/xkbcomp to /usr/bin/xkbcomp
- Removed xkbcomp as Buildrequire (bnc#953161)
- Added man page xkeyboard-config (7)</changelog>
  <changelog author="eich@suse.com" date="1451304001">- Adding 'BuildRequires: xsltproc' to build man page.</changelog>
  <changelog author="sndirsch@suse.com" date="1453464000">- add /usr/share/X11 dir to filelist in order to fix build again</changelog>
  <changelog author="sndirsch@suse.com" date="1453896000">- Update to version 2.17
  * Added sbj keymap for Jolla phone
  * Adding the option to make Caps Lock act as a Menu key.
  * add altwin:prtsc_rwin
  * Add br(thinkpad) to the xml files
  * symbols/group: re-enable grp:ctrls_toggle
  * Make us(dvp) work with regular right Alt key again
  * Updated Azerbaijani layout
  * Azerty French Layout
  * Added French Togo
  * More changes to tg layout
  * Added de(koy)
  * syntax fix
  * Translations updated before release
  * Reenable layer5-lock for de variants
  * Icelandic QWERTY Layout: Add ability to write Icelandic quotation marks (??)</changelog>
  <changelog author="sndirsch@suse.com" date="1465214400">- Update to version 2.18
  * Add Ctrl+Win keyboard layout switch.
  * rules: Giving the caps:ctrl_modifier option a distinctive description.
  * Sorting the Caps Lock options in a consistent manner.
  * symbols: add explicit definition for Group2 to win_space_toggle
  * Added Bone layout (including the q/eszett variant) and Neo qwertz/qwerty
  * Added the Ruble signe
  * Added us(carpalx)
  * Add Algerian layout with variants
  * Added some Asian layouts
  * Added US layout for IBM Arabic 238L
  * Synced descriptions
  * Added Armenian dram sign to Armenian phonetic
  * Fixed ISO codes for Jawi</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Run over with spec-cleaner - pkgconfig/perl deps conversion
- Use post dependency on coreutils instead of prereq
- Disable silent rules to see whats happening
- Tweak configure options to match what configure.ac contains and what
  is needed
- Remove path provides on the old /etc location, should not be needed
  after all those years</changelog>
  <changelog author="sndirsch@suse.com" date="1475582400">- Update to version 2.19
  * Bug fixes and performance improvements</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 2.20
  * Bug fixes and performance improvements</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1496404800">- Update to version 2.21:
  + Two "Hausa" layout variants with identical descriptions
  + Fixed RALT config of de(T3)
  + Descriptions formatting, typos and mistakes v2
  + two new layouts "Russian (Germany, recommended)" and "Russian (Germany,
    transliteration)" for german keyboards
  + Updated apl stuff
  + Updated apl version
  + Added it(fur)
  + Updated translations (broken with prev commit)
  + Add missing letter I? to French (Togo) keyboard and update language list
  + Duplicate "Malay (Jawi)" entry
  + Update to lk(us)
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Amending typo
  + English (Canada) input source is missing the left backslash key
  + UK is not an exception any more
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Adding Sarala Telugu Keyboard layout.
  + steelseries apex300 geometry</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507204800">- Update to version 2.22:
  + typofix tel-sarala key layout
  + Whitelist Indian keyboard layouts. #101532
  + Enable level3 ralt_switch by default in Kazakh (ext) layout.
  + Extend more keys in Kazakh (ext) layout.
  + Add "AltGr" back into the description for altgr-intl layouts
  + Added Old Hungarian layout
  + ctrl: add missing modifier_map
  + Add grp:menu_switch
  + adds the shortDescription for es-cat and es-ast layouts
  + Added Friulian translation
  + Missing fur in ALL_LINGUAS added
  + Add a Arabic version of Jawi keyboard layout and it's own phonetic version
  + Adding Finnish Dvorak layout
  + Add Ladin layout for it and de keyboards
  + Double Russian fixed
  + Possible typo in word "lever"
  + Typo for Dell latitude
  + Choose only one between "behavior" and "behaviour"
  + Typo in "non-breakable space"
  + Spelling fix in guillemets
  + Add Swedish sv_dvorak based on us dvorak-intl
  + fixed nontranslatable description and shortDescription tags
  + Prerelease translations sync
  + Added a bit of explanation for diff, to make it clear
  + Fixed old Hungarian
  + Replaced NoSymbol with dead_belowmacron in default German keyboard layout
  + Added Polyglot and Reactionary Russian layout</changelog>
  <changelog author="sndirsch@suse.com" date="1507636800">- n_suse-ctrl-alt-bksp-terminate.patch
  * removed the hunk, which made Shift-RCTL and Shift-RALT the
    default Compose key (bsc#1059438)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Add U_xkeyboard-config_fix-typo-hungarian.patch: Fix typo in
  hungarian (fdo#103123).</changelog>
  <changelog author="sndirsch@suse.com" date="1517400000">- Update to version 2.23
  * Added it(intl), it(scn) and us(scn)
  * Minor fidvorak adjustment
  * Typo fixed
  * Refreshed the default Arabic keyboard layout
  * more robust comment handling
  * replace '?' (0x10002bc) with '?' (0x100055a) in armenian layout
  * Add polish layout for use glagolica script
  * Use default compose key with Finnish keyboard
  * incomplete Finnish fix patch
  * Prerelease translation sync
  * Added International Phonetic Alphabet
- supersedes U_xkeyboard-config_fix-typo-hungarian.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1517486400">- Update to version 2.23.1
  * Fixing the build</changelog>
  <changelog author="sndirsch@suse.com" date="1517572800">- U_Fix-typo-in-Polish-symbols-file.patch
  * fixes broken polish symbols file (fdo#104904)</changelog>
  <changelog author="sndirsch@suse.com" date="1548936000">- U_Map-evdev-keycodes-KEY_RFKILL-and-KEY_WWAN-to-XF86RF.patch
  * fixes missing mappings for evdev keys KEY_RFKILL and KEY_WWAN
    (boo#1123784)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1570881600">- U_Updating-Old-Hungarian.patch
  * fix capslock in Old Hungarian layout (boo#1153774)</changelog>
</package>
<package pkgid="a59c14cb1db6c26dff6e7704b4372605474a17e92c744d1bb9465262073f2027" name="xkeyboard-config-lang" arch="noarch">
  <version epoch="0" ver="2.23.1" rel="lp152.5.3.1"/>
  <changelog author="sndirsch@suse.com" date="1432728000">-  Update to version 2.15
  * Here is another minor release. Thanks to the Translation
    Project for the several updated translations.
  - symbols/typo: rework typographic layout.
  - Add support for Latinamerican Dvorak layout
  - added lk(us)
  - fixed the license (removed GPL)
  - Removed GPLv3 line
  - Fixed Singhala -&gt; Sinhala
  - Updated cm layout
  - Updated from TP
  - Update from TP
  - Define &lt;LSGT&gt; key properly in basic layout</changelog>
  <changelog author="sndirsch@suse.com" date="1445342400">- Update to version 2.16
  * Move apostrophe U+0027 to the first level and add U+02BC one to
    ua(unicode)
  * Add support for chromebooks layout
  * Add missing semicolons in symbols/inet
  * Undo incompatible us(dvp) layout additions
  * Define a keyboard layout for the Ol Chiki script
  * new layout - Russian Phonetic Czech
  * Correct capitalization and naming of us(dvp) "Programmer Dvorak"
  * added swap_lalt_lwin
  * fixed Icelandic Dvorak
  * Broken xml fixed
  * Fixed mac file, use utf-8
  * Added Teck keyboard
  * added missing Teck file
  * prerelease translation sync
  * Added Finnish DAS layout
- refreshed n_suse.patch</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1445342401">- Rename n_suse.patch -&gt; n_suse-ctrl-alt-bksp-terminate.patch to
  reflect patch usage
- Rename disable-2xalt_2xctrl-toggle.diff -&gt;
  n_disable-2xalt_2xctrl-toggle.diff to follow X11:XOrg patch
  guidelines</changelog>
  <changelog author="eich@suse.com" date="1451304000">- Removed link from /usr/share/X11/xkb/xkbcomp to /usr/bin/xkbcomp
- Removed xkbcomp as Buildrequire (bnc#953161)
- Added man page xkeyboard-config (7)</changelog>
  <changelog author="eich@suse.com" date="1451304001">- Adding 'BuildRequires: xsltproc' to build man page.</changelog>
  <changelog author="sndirsch@suse.com" date="1453464000">- add /usr/share/X11 dir to filelist in order to fix build again</changelog>
  <changelog author="sndirsch@suse.com" date="1453896000">- Update to version 2.17
  * Added sbj keymap for Jolla phone
  * Adding the option to make Caps Lock act as a Menu key.
  * add altwin:prtsc_rwin
  * Add br(thinkpad) to the xml files
  * symbols/group: re-enable grp:ctrls_toggle
  * Make us(dvp) work with regular right Alt key again
  * Updated Azerbaijani layout
  * Azerty French Layout
  * Added French Togo
  * More changes to tg layout
  * Added de(koy)
  * syntax fix
  * Translations updated before release
  * Reenable layer5-lock for de variants
  * Icelandic QWERTY Layout: Add ability to write Icelandic quotation marks (??)</changelog>
  <changelog author="sndirsch@suse.com" date="1465214400">- Update to version 2.18
  * Add Ctrl+Win keyboard layout switch.
  * rules: Giving the caps:ctrl_modifier option a distinctive description.
  * Sorting the Caps Lock options in a consistent manner.
  * symbols: add explicit definition for Group2 to win_space_toggle
  * Added Bone layout (including the q/eszett variant) and Neo qwertz/qwerty
  * Added the Ruble signe
  * Added us(carpalx)
  * Add Algerian layout with variants
  * Added some Asian layouts
  * Added US layout for IBM Arabic 238L
  * Synced descriptions
  * Added Armenian dram sign to Armenian phonetic
  * Fixed ISO codes for Jawi</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Run over with spec-cleaner - pkgconfig/perl deps conversion
- Use post dependency on coreutils instead of prereq
- Disable silent rules to see whats happening
- Tweak configure options to match what configure.ac contains and what
  is needed
- Remove path provides on the old /etc location, should not be needed
  after all those years</changelog>
  <changelog author="sndirsch@suse.com" date="1475582400">- Update to version 2.19
  * Bug fixes and performance improvements</changelog>
  <changelog author="sndirsch@suse.com" date="1485950400">- Update to version 2.20
  * Bug fixes and performance improvements</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1496404800">- Update to version 2.21:
  + Two "Hausa" layout variants with identical descriptions
  + Fixed RALT config of de(T3)
  + Descriptions formatting, typos and mistakes v2
  + two new layouts "Russian (Germany, recommended)" and "Russian (Germany,
    transliteration)" for german keyboards
  + Updated apl stuff
  + Updated apl version
  + Added it(fur)
  + Updated translations (broken with prev commit)
  + Add missing letter I? to French (Togo) keyboard and update language list
  + Duplicate "Malay (Jawi)" entry
  + Update to lk(us)
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Amending typo
  + English (Canada) input source is missing the left backslash key
  + UK is not an exception any more
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Adding Sarala Telugu Keyboard layout.
  + steelseries apex300 geometry</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507204800">- Update to version 2.22:
  + typofix tel-sarala key layout
  + Whitelist Indian keyboard layouts. #101532
  + Enable level3 ralt_switch by default in Kazakh (ext) layout.
  + Extend more keys in Kazakh (ext) layout.
  + Add "AltGr" back into the description for altgr-intl layouts
  + Added Old Hungarian layout
  + ctrl: add missing modifier_map
  + Add grp:menu_switch
  + adds the shortDescription for es-cat and es-ast layouts
  + Added Friulian translation
  + Missing fur in ALL_LINGUAS added
  + Add a Arabic version of Jawi keyboard layout and it's own phonetic version
  + Adding Finnish Dvorak layout
  + Add Ladin layout for it and de keyboards
  + Double Russian fixed
  + Possible typo in word "lever"
  + Typo for Dell latitude
  + Choose only one between "behavior" and "behaviour"
  + Typo in "non-breakable space"
  + Spelling fix in guillemets
  + Add Swedish sv_dvorak based on us dvorak-intl
  + fixed nontranslatable description and shortDescription tags
  + Prerelease translations sync
  + Added a bit of explanation for diff, to make it clear
  + Fixed old Hungarian
  + Replaced NoSymbol with dead_belowmacron in default German keyboard layout
  + Added Polyglot and Reactionary Russian layout</changelog>
  <changelog author="sndirsch@suse.com" date="1507636800">- n_suse-ctrl-alt-bksp-terminate.patch
  * removed the hunk, which made Shift-RCTL and Shift-RALT the
    default Compose key (bsc#1059438)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Add U_xkeyboard-config_fix-typo-hungarian.patch: Fix typo in
  hungarian (fdo#103123).</changelog>
  <changelog author="sndirsch@suse.com" date="1517400000">- Update to version 2.23
  * Added it(intl), it(scn) and us(scn)
  * Minor fidvorak adjustment
  * Typo fixed
  * Refreshed the default Arabic keyboard layout
  * more robust comment handling
  * replace '?' (0x10002bc) with '?' (0x100055a) in armenian layout
  * Add polish layout for use glagolica script
  * Use default compose key with Finnish keyboard
  * incomplete Finnish fix patch
  * Prerelease translation sync
  * Added International Phonetic Alphabet
- supersedes U_xkeyboard-config_fix-typo-hungarian.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1517486400">- Update to version 2.23.1
  * Fixing the build</changelog>
  <changelog author="sndirsch@suse.com" date="1517572800">- U_Fix-typo-in-Polish-symbols-file.patch
  * fixes broken polish symbols file (fdo#104904)</changelog>
  <changelog author="sndirsch@suse.com" date="1548936000">- U_Map-evdev-keycodes-KEY_RFKILL-and-KEY_WWAN-to-XF86RF.patch
  * fixes missing mappings for evdev keys KEY_RFKILL and KEY_WWAN
    (boo#1123784)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1570881600">- U_Updating-Old-Hungarian.patch
  * fix capslock in Old Hungarian layout (boo#1153774)</changelog>
</package>
</otherdata>